last executing test programs: 1m43.813134038s ago: executing program 4 (id=1826): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[], 0xa) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)="e2", 0x1, 0x40000, 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, 0x0, 0x0, 0x1) (async) unshare(0x6020400) (async) unshare(0x8020200) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000800) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xfff2, 0x10}, {0xfff3, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000844}, 0x2000c8d1) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r7) (async) socket(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES64=r1, @ANYRES32=r6, @ANYRESOCT=r2], 0x48) (async) ioctl$SIOCSIFHWADDR(r7, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) (async) close(r5) (async) socket(0x2b, 0x80801, 0x1) (async) splice(r4, 0x0, r5, 0x0, 0x10500, 0x0) (async) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000180), 0x10) (async) socket$rds(0x15, 0x5, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1c0000002f00090027bd7000000000000400000004001d0004001f"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 1m43.56837091s ago: executing program 4 (id=1827): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) socket(0x400000000010, 0x3, 0x0) r1 = socket$kcm(0xa, 0x3, 0x87) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005110000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16, @ANYRES16=r1], 0xfdef) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_FW_DOWNLOAD(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000ffdbdf2515000000f90014002f292b3a5e2c000008000100", @ANYRES32=r7, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x88040}, 0x20000080) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r9, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r10, &(0x7f0000000000), 0x0}, 0x20) 1m43.005567732s ago: executing program 3 (id=1831): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000009f00)={0x0, 0x0, &(0x7f0000009ec0)={&(0x7f0000004340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSETELEM={0xf0, 0xe, 0xa, 0x101, 0x0, 0x0, {0x6, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xdc, 0x3, 0x0, 0x1, [{0xd8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_KEY={0xc0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x71, 0x1, "4408f68929288a702e0d1e114b27da16f370d1a42a8da44e69a708ee6b22e232133067ecf78199c904c0b6cef741cfc867f1c061e3002a13d8420da3a53e8a882c89cb7832ade488b834ca1eb9e34a04b727da9a8cc4b28a5de8aececcfecf4f36b201c58b35aecbe86a4e8e18"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9e02f13dd87731e4}}}, 0x118}, 0x1, 0x0, 0x0, 0x4008000}, 0xc000) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) syz_80211_inject_frame(&(0x7f0000000200)=@device_b, &(0x7f0000000280)=@ctrl_frame=@cts={{}, {0x654d}, @broadcast}, 0xa) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0xa244}], 0x1, 0x40000000, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001c00010029bd7000fedbdf2507000000", @ANYRES32=r4], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000005f40), r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="34000000140001002bbd7000fadbdf250a0801ff", @ANYRES32=r7, @ANYBLOB="14000200ff010000090000000000000000000001080008002504"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x10080) (fail_nth: 4) sendmsg$IEEE802154_ADD_IFACE(r5, 0x0, 0x4000040) 1m42.524503344s ago: executing program 0 (id=1833): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x1}, {}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) (fail_nth: 2) 1m42.52115392s ago: executing program 4 (id=1834): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000180)=0x1, 0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) pipe(&(0x7f0000002740)) 3.550008383s ago: executing program 4 (id=1836): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB='&'], 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x9, 0x6a, &(0x7f00000002c0)=""/106, 0x41000, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff], &(0x7f0000000700), 0x10, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 3.549206982s ago: executing program 2 (id=1837): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x48, &(0x7f0000000080)={0x88, 0xb, '\x00', [@generic={0xd, 0x56, "40c08152d6fd6f5454111f6b971a70a3107bf80cb782806d7bf99cac40155353673c7da83cb45c72839a430efac7e0261da55793c8e5bef68074e831d55681c731a6f2ebb523ac8a88c7a254bb0de81eb14aa4ed5547"}]}, 0x60) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r1, 0x0, 0x2, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000003feffff720af0fff8ffffff71a4f0ff000000007110bf00000000001d400500000000004704000001ed00000f030000000000006f440000000000006b0a00fe000000007303000000000000b500feff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050cdcfc92f5daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf9bf04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff4e2c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62cd15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc8230000065937f36f6490eb033b1ce0d4922701cb42aa86ee11cd5950b58ebffffae2aba1a21410e6cb3835bc2c19c9dacbb5f836d1c0de069c20c55fa567859aca8be3afdc3a14779e9181a382831580eac154d314974d209c00896548b04f80d68da1c7ecdfea1e05d0f442b81c4f2a38ae1f43688aff1d3eb14112da5d5289bedeeff7093a12faf47f55bd7ffc82893600042e761ec18de4cd287e176befc4af4063e5f091f8a50cbf02ad70682c0131d616ff6d999fc6fba6e9d4a3fc4e6430aca493d38db18ef4b2d46a22c1dc14910a49126684e453d30ea51dc537a0c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) write$cgroup_devices(r2, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) socket(0x8, 0x800, 0xb11b) 3.548502111s ago: executing program 2 (id=1838): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x9, 0x3, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, &(0x7f0000000200), {[{{@uncond, 0x0, 0x0, 0x0, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'RAS\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{}, {0x28}}}}, 0x2b8) (async, rerun: 64) sendto$inet6(r0, &(0x7f0000000000)='\x00', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x6b7, 0x0, @loopback}, 0x1c) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000bf7f9f8034001280110001006272696467655f7385617665000000001c00058005001c000000000005001e00fd"], 0x54}, 0x1, 0x0, 0x0, 0x20040800}, 0x2000c050) 3.5482448s ago: executing program 3 (id=1839): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd52000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001d90000080007000300000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 3.547955844s ago: executing program 1 (id=1840): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x8, 0x42, 0x40, 0xc0, 0x1}, 0x50) accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x101b, &(0x7f0000001640)=""/4123}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfd}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="9500000000000000185600000d0000000000000000000000185900000500000000000000000000001857000007000000000000000000000018610000030000000000000006000000185a0000020000000000000000000000d30bf2a25e06284ecd7c1307a9036b51353fe6dd1f8cd1e69c0cfb87815387571298e37071c607e9c307009bce153cebe0c74855dadd8554f590bdeb39b1ff6e425ab9abc6b3cc87ed115d6b5ba7bf4fbca6b65d85399414955c71ffbdd69979823b78d4b86e721ccfae05a19eae130aa0e601287560ecc7731a21f8d96493b0f9a9487257459c27343370"], &(0x7f0000000200)='GPL\x00', 0x0, 0xf, &(0x7f0000000240)=""/15, 0x40f00, 0x0, '\x00', r1, 0x19, r3, 0x8, &(0x7f00000002c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x2, 0x4, 0xd2a}, 0x10, 0x3, r2, 0x3, 0x0, &(0x7f0000000340)=[{0x2, 0x1, 0xf, 0xa}, {0x0, 0x1, 0x4, 0x1}, {0x0, 0x1, 0x6, 0xa}], 0x10, 0x9}, 0x94) 3.547755159s ago: executing program 2 (id=1841): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) 3.547497001s ago: executing program 0 (id=1842): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newqdisc={0xb0, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x484}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xb0}}, 0x0) 3.54383062s ago: executing program 1 (id=1843): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x40014) 3.54313411s ago: executing program 1 (id=1844): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e20, 0xfffefffd, @local, 0xffffffdc}}, 0x0, 0x0, 0x4a, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb302000000000000007300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000280)='\xc3)\',[*][\x00', 0x300000, &(0x7f0000000300)={@_ha_fsid={[0x7, 0x6]}, {0xff, 0xb, 0x0, 0x5}}, 0x5, 0x0, &(0x7f0000000540)=0xf19}) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x8b, 0x10000, @mcast2, 0x5}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="671723d7c6013b", 0x7}, {&(0x7f0000000140)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000200)="0090000000", 0x5}], 0x3}, 0x20048b88) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000050000000004000009"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000005000c0a010100000000000000000a000006140000001100010000000500000000000100000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="20010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x4}, 0x8000) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c00", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r2, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) 3.540092214s ago: executing program 0 (id=1845): socket$inet_mptcp(0x2, 0x1, 0x106) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000f7dc0)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000f7dc0)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000f7fc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000f81c0)={{0x0, 0x5, 0xffffffffffffffff, 0xdb, 0x7, 0xfffffffffffffff8, 0x0, 0x8, 0x0, 0x0, 0x8, 0x2, 0x5, 0x0, 0x80}, 0x8, [0x0]}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000f81c0)={{0x0, 0x5, 0xffffffffffffffff, 0xdb, 0x7, 0xfffffffffffffff8, 0x0, 0x8, 0x0, 0x0, 0x8, 0x2, 0x5, 0x0, 0x80}, 0x8, [0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000f8240)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000f8240)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000f8440)={0xd1c, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x3, "ae28c41790c403"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000f9440)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xb4, "44371b769b7372"}) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xd9, @dev={0xfe, 0x80, '\x00', 0x35}, 0x5}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r9, 0x84, 0x6d, &(0x7f0000000a80)={r10, 0x18, "132bf2b2631e4a669e5ab545f4df3af85ad7e43ec2b12936"}, &(0x7f0000000180)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f0000000740)={0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES64=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x200000}, 0x94) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000fa440)={0xffffffffffffffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x5, "23a771325d9478"}) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xd9, @dev={0xfe, 0x80, '\x00', 0x35}, 0x5}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r13, 0x84, 0x6d, &(0x7f0000000a80)={r14, 0x18, "132bf2b2631e4a669e5ab545f4df3af85ad7e43ec2b12936"}, &(0x7f0000000180)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r13, 0x81f8943c, &(0x7f0000000740)={0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES64=r15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x200000}, 0x94) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000fb440)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000fb440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000fb640)={0x800, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {r5, r6}, {r7, r8}, {r11, r12}, {r15, r16}], 0x7, "cfce454b113f74"}) unshare(0x2a060400) (async) unshare(0x2a060400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1003, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0xa, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0x10, 0x10001006, 0x2, 0x6, 0x1bf7, 0x5e81, 0x40, 0xa0d1ae, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x3, 0x40001, 0x7f, 0x4, 0xa, 0x9, 0x8001, 0x101, 0xa, 0x1fa0860a, 0x3, 0x100aa, 0x7f, 0x2, 0x0, 0x4005, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x5, 0x7, 0x1, 0x0, 0x4, 0x9, 0x8, 0x3, 0x3, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x100, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x0, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x9, 0xc50, 0x2, 0xe, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x100, 0x4, 0x2, 0x40, 0x8, 0x4, 0x5, 0x401, 0x66cd, 0x8, 0x8, 0x799e, 0x1fc, 0x1ff, 0xffffffff]}}) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1003, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0xa, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0x10, 0x10001006, 0x2, 0x6, 0x1bf7, 0x5e81, 0x40, 0xa0d1ae, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x3, 0x40001, 0x7f, 0x4, 0xa, 0x9, 0x8001, 0x101, 0xa, 0x1fa0860a, 0x3, 0x100aa, 0x7f, 0x2, 0x0, 0x4005, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x5, 0x7, 0x1, 0x0, 0x4, 0x9, 0x8, 0x3, 0x3, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x100, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x0, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x9, 0xc50, 0x2, 0xe, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x100, 0x4, 0x2, 0x40, 0x8, 0x4, 0x5, 0x401, 0x66cd, 0x8, 0x8, 0x799e, 0x1fc, 0x1ff, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 3.53954821s ago: executing program 1 (id=1846): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) recvmmsg(r0, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8004}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001500)=""/4112, 0x1010}, {0x0}, {&(0x7f0000000040)=""/212, 0xd4}], 0x3}, 0x400000}], 0x3, 0x20000, 0x0) 3.539048483s ago: executing program 2 (id=1847): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000ffb00000000000000000000004000000bb7f1affc600feff0000000a95"], &(0x7f0000000300)='syzkaller\x00', 0x5, 0x0, 0x0, 0x7000000, 0x14}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r3 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1a0000000f000000060000000100000004040400", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000000000000009ef77ae8a31935d5dbfc53d0b80e2e9f5440dce411a0baa9dcbcd1ee1085fb62c54e63bd6cbba717523cfd5053788873e89ba6d73156145bda008dcd83157ad552ceedc35f5a2c67b36a9f66274c2bb189ab9b2e60178cbd5edd8a75b54cf7da4ca4c565670ee97c06cf3e64497cf0f39546c9482807cec07de88d1a0d4256c4fea16988b6c4cacc21aa798f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000010000000500"/28], 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, 0x1, 0x4, 0x801, 0x0, 0x0, {0xb, 0x0, 0x8}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xfffff000}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}, @NFULA_CFG_MODE={0xa, 0x2, {0xfffffffe, 0x1}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x4, 0x1}}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x4040050) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x4}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x6}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e1}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) r11 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_int(r11, 0x29, 0x4a, 0x0, &(0x7f0000000040)) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c00018006000100ff"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$nl_route(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001800010000000001fddbdf251d"], 0x44}}, 0x44000) sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf254400000008000300", @ANYRES32=r1, @ANYBLOB="0c020000020000001f000000dbaa78bb36447ac008000d00020000000a001800030303031903000008000c0064000000bf6cea09911c5b57b1439e2217cd4b8b49e2d1dacbb71fe71010714f8097ac2ba7e2cebf8595cb7ce5ccbdf72c915298475d"], 0x44}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) setsockopt$inet6_udp_int(r3, 0x11, 0x65, &(0x7f0000000280)=0x6, 0x4) 3.538681284s ago: executing program 3 (id=1848): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r3, &(0x7f0000000a40)=[{&(0x7f00000007c0)='T', 0x1}], 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="12000000040000000800"], 0x48) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0xc3fd}, {0x0, 0x11}], 0x2}}], 0x2, 0x20004810) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r1, 0x9, 0x0, 0x8}) close(0x3) 3.538393701s ago: executing program 4 (id=1849): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRES16=r2, @ANYRESHEX], 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x4800) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001a000100feffffff0000000081"], 0x1c}}, 0x0) bind$llc(r3, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) unshare(0x20000400) close(0x3) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r5, 0x0, 0xdfffffff000) connect$llc(r3, &(0x7f0000000040)={0x1a, 0xf, 0x35, 0x6, 0x6, 0xf, @link_local}, 0x10) 3.458552652s ago: executing program 1 (id=1850): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv', 0x2) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200200, @loopback, 0xffffffff}, 0x1c) sendto$inet6(r0, 0x0, 0x3e8, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x8, @loopback, 0xa8e}, 0x1c) 3.415943156s ago: executing program 3 (id=1851): unshare(0xe040400) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x3}, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x6f89c659e9b3087f) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)=ANY=[@ANYBLOB="20010000410007012cbd7000fddbdf25037c00000400c28008010180040110801400080000500000000000000000000000000001ec000b"], 0x120}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) 3.288633207s ago: executing program 1 (id=1852): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0x7fffdffff000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x3c, r7, 0x701, 0x0, 0x0, {0x2e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r9, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r12], 0x54}}, 0x44000) r13 = socket(0x1, 0x803, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x3, [@func_proto={0x2, 0x1, 0x0, 0x13, 0x2, [{0x1, 0x1}]}]}, {0x0, [0x0]}}, 0x0, 0x2f}, 0x28) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="50dc12000000030f00"/20, @ANYRES32=0x0, @ANYBLOB="040100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=r14], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2], 0x3c}}, 0x0) 3.255703051s ago: executing program 0 (id=1853): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000300)=ANY=[@ANYBLOB="141b00001000010000000000000000000000000a20000000000a050000000000000000000500000a0900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a310000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080005400000000014000000110001"], 0xac}}, 0x24004000) 3.233010913s ago: executing program 3 (id=1854): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x40014) 3.099080535s ago: executing program 0 (id=1855): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000700850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x4) getsockopt(r1, 0x6, 0x1, &(0x7f0000000200)=""/5, &(0x7f0000000340)=0x5) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00050005"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x36, 0x301, 0x70bd25, 0xfffffffc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000030000009f54ffff0000000095"], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) close(r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_NEWRULE={0xe8, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x47}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6800}]}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9200}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8864}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x809b}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6004}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x99}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x24}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1a0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000004ecdcb1900000000000500000a480000000c0a01010000ddfb02e4d89dd0223ff00000000000000a0000060900020073797a3000000000795f36ab01d6c82a000000001c000380180000800c00018006000100060000000800034000000100008000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="000000000000010100000000000000000300000a28000000060a010400000000000000000a0000060900010073797a31000000000800094000000001140000001100010000000000000000000300000a"], 0x50}, 0x1, 0x0, 0x0, 0x40048d1}, 0x24044010) 3.036911071s ago: executing program 3 (id=1856): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x484}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xa4}}, 0x0) 3.033709377s ago: executing program 2 (id=1857): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e20, 0xfffefffd, @local, 0xffffffdc}}, 0x0, 0x0, 0x4a, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb302000000000000007300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000280)='\xc3)\',[*][\x00', 0x300000, &(0x7f0000000300)={@_ha_fsid={[0x7, 0x6]}, {0xff, 0xb, 0x0, 0x5}}, 0x5, 0x0, &(0x7f0000000540)=0xf19}) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x8b, 0x10000, @mcast2, 0x5}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="671723d7c6013b", 0x7}, {&(0x7f0000000140)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000200)="0090000000", 0x5}], 0x3}, 0x20048b88) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000050000000004000009"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000005000c0a010100000000000000000a000006140000001100010000000500000000000100000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="20010000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fddbdf25370000000c0099000100000030000000080057000400000008005700c200000008005700830400000800a000ff03000008002201ce01000008005700040000000800220149020000080026006c09000005001901080000000800270000000000050018013400000008002700010000000800a000000000000800a1000700000005001901080000000800a100fbffffff0800a100fe0a0000050019010400000005001801060000000800a0080000000005001901050000000500180135000000080027000300000008002201dc030000080026006c090000080026006c09000008009f0001000000050019010d00000008009f0006000000a4080026006c090000050019010c000000080057004000000b5e484b9213908e3f54179be13048aa694c33ea5b3d6e7e1df7182c0177f2a39eb9dc4ae83ac092ca36bad893efe9d7de8c39f254ed4ff812a1c93a462f5c31218105ff29991d2c357e71a77f73f53a3b8b20e1fb0d327fc7ecfb779268cd05dea2b82ef0715cfa5226ecfc271d"], 0x120}, 0x1, 0x0, 0x0, 0x4}, 0x8000) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c00", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r2, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) 2.827177999s ago: executing program 0 (id=1858): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="010000000010000000000000000000000000002000000000000000000000000000000000008000000000000000000000000000fcffff"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x14, 0x0, &(0x7f00000000c0)="dc188619b95d02ff4284860188a86a4e0800b976", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 18.763999ms ago: executing program 2 (id=1859): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000001c40)={{0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x31b201, &(0x7f00000000c0)={@align=0x7ff, {0x7, 0x800, 0x6}}, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x6}, {[0x9, 0xc0, 0x543, 0x2]}, 0xa, 0x1000, &(0x7f0000000c40)=""/4096}) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000001cc0)=@ccm_128={{0x303}, "bc2f28511ef7233e", "c0ae602210faef4c635080225bec0143", "acd093ed", "27924fd358e7c6cb"}, 0x28) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r0, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%-010d \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001d00)={0x6, 0x11, &(0x7f0000000240)=@raw=[@call={0x85, 0x0, 0x0, 0xd2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x9}, @alu={0x7, 0x1, 0xa, 0x0, 0x4, 0x50, 0xfffffffffffffff0}], &(0x7f0000000300)='syzkaller\x00', 0x7, 0xc6, &(0x7f0000000500)=""/198, 0x40f00, 0x8, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000600)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0x9, 0xfffffff0, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000740)=[r0, r0, r0, r3, r0], &(0x7f0000000780)=[{0x3, 0x4, 0x6, 0x6}, {0x1, 0x1, 0x8, 0x5}, {0x0, 0x5, 0x6, 0xa}, {0x0, 0x2, 0x6, 0xd}, {0x3, 0x1, 0x4, 0xc}], 0x10, 0x7}, 0x94) sendto$l2tp(r0, &(0x7f0000001dc0)="9774d5d9771ddfd33da23b39a7d0f5bd586b2d8eac6f7a232632687cb4686c187765651c969724e4c9d59ed8bbb7963356987dff7bf6bb8ac01a553df41eed14215fc8c75a60594c66a0345f2555bde4058582f5b351d65fca61c36650e64607ab249c085fa651b9592f1f432986d796b96c39d099345e01a8a0cf9bad105698447db098fa6407cd882c145618a75a509ee60387440884e4daa2f3b2dd220dd9387102435f0b78a99b60cc2df8783ba8a3c638bb24775f3e5dce4559b6", 0xbd, 0x20000081, &(0x7f0000001e80)={0x2, 0x0, @loopback, 0x1}, 0x10) setsockopt$inet_group_source_req(r2, 0x0, 0x3, &(0x7f00000003c0)={0x3, {{0x2, 0x4e24, @private=0xa010102}}, {{0x2, 0x4e23, @multicast2}}}, 0x108) syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[@ANYBLOB="91b882b09a5bbbbbbbbbbbbb0800450000380000000000019078ac1e0001ac141426030490781200183f25000fff00000000000100000a0101016401010008000071ae9b1c43fc76683ba9bf739ba2dfa459c8e6736186b0784ae33d2b7fa137e2812b29a777517e115f2444582d520b0a006ae881d74a7cdd71a77ef290e8a33d266859b32d219d6df435c939121428de9273"], 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x300, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [0xff, 0x0, 0xffffffff, 0xffffffff], [0xff000000, 0xffffff00, 0xffffff00], 'macvtap0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x3b, 0x5, 0x0, 0x25}, 0x0, 0xd8, 0xf8, 0x60030000, {0x0, 0xff000000}, [@common=@frag={{0x30}, {[0x800, 0x1], 0x3, 0x10, 0x2}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xff000000, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'pim6reg0\x00', {0xff}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x208, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x4, 0x2, 0x1, 0x7}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x1, 0x4}, {0x0, 0xb, 0x6}, {0xffffffffffffffff, 0x1, 0x6}, 0xce, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 0s ago: executing program 4 (id=1860): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e20, 0xfffefffd, @local, 0xffffffdc}}, 0x0, 0x0, 0x4a, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb302000000000000007300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000280)='\xc3)\',[*][\x00', 0x300000, &(0x7f0000000300)={@_ha_fsid={[0x7, 0x6]}, {0xff, 0xb, 0x0, 0x5}}, 0x5, 0x0, &(0x7f0000000540)=0xf19}) r2 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x8b, 0x10000, @mcast2, 0x5}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="671723d7c6013b", 0x7}, {&(0x7f0000000140)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000200)="0090000000", 0x5}], 0x3}, 0x20048b88) poll(&(0x7f0000000600)=[{r1, 0x8}, {r2, 0x21da}], 0x2, 0x5) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000005000c0a010100000000000000000a000006140000001100010000000500000000000100000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="20010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x4}, 0x8000) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}, 0x7ffffffe}, 0x4008054) write$nci(r5, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) kernel console output (not intermixed with test programs): gle Compute Engine, BIOS Google 07/24/2026 [ 218.980004][ T8807] Call Trace: [ 218.980012][ T8807] [ 218.980022][ T8807] dump_stack_lvl+0xe8/0x150 [ 218.980056][ T8807] warn_alloc+0x24c/0x270 [ 218.980090][ T8807] ? __pfx_warn_alloc+0x10/0x10 [ 218.980112][ T8807] ? xskq_create+0x56/0x220 [ 218.980138][ T8807] ? xsk_setsockopt+0x52a/0x960 [ 218.980163][ T8807] ? do_syscall_64+0x174/0x580 [ 218.980190][ T8807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.980227][ T8807] __vmalloc_node_range_noprof+0x12c/0x1730 [ 218.980293][ T8807] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 218.980319][ T8807] ? __kmalloc_cache_noprof+0x32d/0x660 [ 218.980345][ T8807] ? __kmalloc_cache_noprof+0x150/0x660 [ 218.980373][ T8807] ? xskq_create+0x56/0x220 [ 218.980404][ T8807] xskq_create+0x148/0x220 [ 218.980431][ T8807] ? xsk_init_queue+0x8a/0xe0 [ 218.980459][ T8807] xsk_init_queue+0x8a/0xe0 [ 218.980488][ T8807] xsk_setsockopt+0x52a/0x960 [ 218.980511][ T8807] ? __fget_files+0x2a/0x420 [ 218.980538][ T8807] ? __pfx_xsk_setsockopt+0x10/0x10 [ 218.980563][ T8807] ? __pfx_aa_sk_perm+0x10/0x10 [ 218.980597][ T8807] ? aa_sock_opt_perm+0xff/0x1a0 [ 218.980620][ T8807] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 218.980639][ T8807] ? __pfx_xsk_setsockopt+0x10/0x10 [ 218.980666][ T8807] do_sock_setsockopt+0x17c/0x1b0 [ 218.980697][ T8807] __x64_sys_setsockopt+0x13d/0x1b0 [ 218.980723][ T8807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.980745][ T8807] do_syscall_64+0x174/0x580 [ 218.980770][ T8807] ? trace_irq_disable+0x3b/0x140 [ 218.980793][ T8807] ? clear_bhb_loop+0x70/0xc0 [ 218.980818][ T8807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.980837][ T8807] RIP: 0033:0x7f36f259e0d9 [ 218.980856][ T8807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.980873][ T8807] RSP: 002b:00007f36f33ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 218.980895][ T8807] RAX: ffffffffffffffda RBX: 00007f36f2825fa0 RCX: 00007f36f259e0d9 [ 218.980910][ T8807] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 218.980922][ T8807] RBP: 00007f36f2635024 R08: 0000000000000004 R09: 0000000000000000 [ 218.980933][ T8807] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.980945][ T8807] R13: 00007f36f2826038 R14: 00007f36f2825fa0 R15: 00007fff6f72f288 [ 218.980979][ T8807] [ 219.112722][ T8807] Mem-Info: [ 219.524282][ T8807] active_anon:5812 inactive_anon:0 isolated_anon:0 [ 219.524282][ T8807] active_file:0 inactive_file:43409 isolated_file:0 [ 219.524282][ T8807] unevictable:0 dirty:236 writeback:0 [ 219.524282][ T8807] slab_reclaimable:10010 slab_unreclaimable:97529 [ 219.524282][ T8807] mapped:30711 shmem:522 pagetables:1329 [ 219.524282][ T8807] sec_pagetables:0 bounce:0 [ 219.524282][ T8807] kernel_misc_reclaimable:0 [ 219.524282][ T8807] free:1318365 free_pcp:10095 free_cma:0 [ 219.688768][ T8827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.975'. [ 219.699033][ T8807] Node 0 active_anon:23448kB inactive_anon:0kB active_file:0kB inactive_file:173428kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122844kB dirty:944kB writeback:0kB shmem:2088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12844kB pagetables:5252kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 220.052994][ T8807] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 220.215550][ T8836] FAULT_INJECTION: forcing a failure. [ 220.215550][ T8836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.232412][ T8807] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 220.284116][ T8836] CPU: 0 UID: 0 PID: 8836 Comm: syz.4.976 Not tainted syzkaller #0 PREEMPT(full) [ 220.284149][ T8836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 220.284161][ T8836] Call Trace: [ 220.284168][ T8836] [ 220.284176][ T8836] dump_stack_lvl+0xe8/0x150 [ 220.284210][ T8836] should_fail_ex+0x40c/0x560 [ 220.284248][ T8836] _copy_to_user+0x31/0xb0 [ 220.284280][ T8836] simple_read_from_buffer+0xe1/0x170 [ 220.284311][ T8836] proc_fail_nth_read+0x1bb/0x230 [ 220.284341][ T8836] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 220.284372][ T8836] ? rw_verify_area+0x24a/0x4c0 [ 220.284402][ T8836] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 220.284427][ T8836] vfs_read+0x213/0xa80 [ 220.284460][ T8836] ? __pfx___mutex_lock+0x10/0x10 [ 220.284489][ T8836] ? __pfx_vfs_read+0x10/0x10 [ 220.284518][ T8836] ? __fget_files+0x2a/0x420 [ 220.284547][ T8836] ? __fget_files+0x3a2/0x420 [ 220.284570][ T8836] ? __fget_files+0x2a/0x420 [ 220.284603][ T8836] ksys_read+0x150/0x270 [ 220.284634][ T8836] ? __pfx_ksys_read+0x10/0x10 [ 220.284670][ T8836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.284692][ T8836] do_syscall_64+0x174/0x580 [ 220.284718][ T8836] ? trace_irq_disable+0x3b/0x140 [ 220.284739][ T8836] ? clear_bhb_loop+0x70/0xc0 [ 220.284763][ T8836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.284783][ T8836] RIP: 0033:0x7fac23b5e90e [ 220.284801][ T8836] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 220.284817][ T8836] RSP: 002b:00007fac24a21fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 220.284839][ T8836] RAX: ffffffffffffffda RBX: 00007fac24a226c0 RCX: 00007fac23b5e90e [ 220.284852][ T8836] RDX: 000000000000000f RSI: 00007fac24a220a0 RDI: 0000000000000004 [ 220.284864][ T8836] RBP: 00007fac24a22090 R08: 0000000000000000 R09: 0000000000000000 [ 220.284876][ T8836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.284886][ T8836] R13: 00007fac23e26038 R14: 00007fac23e25fa0 R15: 00007ffd5092f2a8 [ 220.284919][ T8836] [ 220.557528][ T8807] lowmem_reserve[]: 0 2488 2488 2488 2488 [ 220.563389][ T8807] Node 0 DMA32 free:1314092kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23308kB inactive_anon:0kB active_file:0kB inactive_file:173436kB unevictable:0kB writepending:960kB zspages:0kB present:3129332kB managed:2548392kB mlocked:0kB bounce:0kB free_pcp:42412kB local_pcp:21624kB free_cma:0kB [ 220.596648][ T8807] lowmem_reserve[]: 0 0 0 0 0 [ 220.601434][ T8807] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:256kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 220.631575][ T8807] lowmem_reserve[]: 0 0 0 0 0 [ 220.636766][ T8807] Node 1 Normal free:3942976kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 220.668839][ T8807] lowmem_reserve[]: 0 0 0 0 0 [ 220.673615][ T8807] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 220.686536][ T8807] Node 0 DMA32: 1209*4kB (UME) 313*8kB (UME) 146*16kB (UM) 140*32kB (UME) 82*64kB (UME) 48*128kB (UME) 17*256kB (UME) 12*512kB (UM) 10*1024kB (UME) 13*2048kB (UME) 303*4096kB (UM) = 1313996kB [ 220.705889][ T8807] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 220.719126][ T8807] Node 1 Normal: 2*4kB (UM) 3*8kB (UM) 8*16kB (UM) 3*32kB (UM) 9*64kB (UM) 6*128kB (UM) 2*256kB (M) 3*512kB (UM) 3*1024kB (UM) 0*2048kB 961*4096kB (UM) = 3942976kB [ 220.769354][ T8807] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 220.800152][ T8840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.978'. [ 220.812164][ T8807] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 220.846866][ T8807] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 220.888906][ T8807] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 220.937958][ T8807] 43929 total pagecache pages [ 220.968199][ T8807] 0 pages in swap cache [ 221.014895][ T8807] Free swap = 124996kB [ 221.062270][ T8807] Total swap = 124996kB [ 221.111201][ T8807] 2097051 pages RAM [ 221.151597][ T8807] 0 pages HighMem/MovableOnly [ 221.191906][ T8807] 428274 pages reserved [ 221.244582][ T8807] 0 pages cma reserved [ 221.682059][ T8861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.985'. [ 221.727646][ T8862] netlink: 'syz.2.986': attribute type 4 has an invalid length. [ 221.754849][ C1] net_ratelimit: 3321 callbacks suppressed [ 221.754871][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.772491][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.784308][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 221.786964][ T3368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.798223][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.816425][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.828214][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 221.829883][ T8862] netlink: 152 bytes leftover after parsing attributes in process `syz.2.986'. [ 221.842224][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.860820][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.863768][ T8861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.985'. [ 221.873273][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 222.018262][ T8862] .`: renamed from bond0 [ 222.163410][ T8861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.985'. [ 222.193430][ T8861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.985'. [ 224.410347][ T8912] RDS: rds_bind could not find a transport for fe88::103, load rds_tcp or rds_rdma? [ 224.505990][ T8919] netlink: 'syz.3.1000': attribute type 5 has an invalid length. [ 224.517690][ T8920] RDS: rds_bind could not find a transport for fe88::103, load rds_tcp or rds_rdma? [ 225.048242][ T8932] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 226.007381][ T8953] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1010'. [ 226.322694][ T8961] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 226.506189][ T8964] syzkaller0: entered promiscuous mode [ 226.544468][ T8964] syzkaller0: entered allmulticast mode [ 226.766527][ C1] net_ratelimit: 3635 callbacks suppressed [ 226.766547][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.784242][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.796022][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 226.809066][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 226.822058][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.833831][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.845614][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 226.858651][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 226.871665][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.883409][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.574067][ T9011] netlink: 'syz.3.1033': attribute type 13 has an invalid length. [ 228.983278][ T9023] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1031'. [ 230.763063][ T9053] netlink: 'syz.2.1041': attribute type 3 has an invalid length. [ 230.782246][ T9053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1041'. [ 230.868966][ T9021] hsr0: left promiscuous mode [ 231.216014][ T9021] 8021q: adding VLAN 0 to HW filter on device bond1 [ 231.225852][ T9021] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 231.774622][ C1] net_ratelimit: 4113 callbacks suppressed [ 231.774643][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 231.792380][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 231.805865][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 231.821885][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 231.833688][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 231.845476][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 231.858510][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 231.864454][ T12] bond12: (slave batadv0): failed to get link speed/duplex [ 231.871324][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 231.889313][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.004569][ T9075] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1048'. [ 232.037954][ T9078] netlink: 'syz.0.1047': attribute type 4 has an invalid length. [ 232.077601][ T9078] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1047'. [ 232.352402][ T9085] netlink: 'syz.0.1047': attribute type 4 has an invalid length. [ 232.489129][ T9078] netlink: 'syz.0.1047': attribute type 4 has an invalid length. [ 232.633928][ T9088] netlink: 'syz.3.1050': attribute type 12 has an invalid length. [ 232.725239][ T9088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1050'. [ 233.207282][ T9098] netlink: 424 bytes leftover after parsing attributes in process `syz.4.1054'. [ 233.578086][ T9104] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1057'. [ 233.617412][ T9104] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1057'. [ 235.138388][ T13] IPVS: starting estimator thread 0... [ 236.020180][ T9140] IPVS: using max 23 ests per chain, 55200 per kthread [ 236.784360][ C0] net_ratelimit: 6759 callbacks suppressed [ 236.784383][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.785811][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.790724][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.801909][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.812997][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.824186][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 236.835231][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.847750][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 236.857509][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.869846][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.230477][ C0] bridge0: topology change detected, propagating [ 237.238221][ C0] bridge0: port 4(veth1) entered blocking state [ 237.882682][ T9174] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1079'. [ 237.938882][ T9167] syzkaller0: entered promiscuous mode [ 237.944577][ T9167] syzkaller0: entered allmulticast mode [ 237.965023][ T9171] team0 (unregistering): Port device team_slave_0 removed [ 237.976718][ T9171] team0 (unregistering): Port device team_slave_1 removed [ 238.340655][ T9195] FAULT_INJECTION: forcing a failure. [ 238.340655][ T9195] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 238.379015][ T9195] CPU: 1 UID: 0 PID: 9195 Comm: syz.1.1085 Not tainted syzkaller #0 PREEMPT(full) [ 238.379044][ T9195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 238.379056][ T9195] Call Trace: [ 238.379064][ T9195] [ 238.379072][ T9195] dump_stack_lvl+0xe8/0x150 [ 238.379104][ T9195] should_fail_ex+0x40c/0x560 [ 238.379141][ T9195] prepare_alloc_pages+0x230/0x650 [ 238.379174][ T9195] __alloc_frozen_pages_noprof+0x12f/0x380 [ 238.379205][ T9195] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 238.379235][ T9195] ? __pfx_policy_nodemask+0x10/0x10 [ 238.379260][ T9195] ? __get_vm_area_node+0x136/0x300 [ 238.379278][ T9195] ? __vmalloc_node_range_noprof+0x358/0x1730 [ 238.379299][ T9195] ? __vmalloc_noprof+0xd2/0x120 [ 238.379318][ T9195] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 238.379341][ T9195] ? bpf_prog_alloc+0x3c/0x1a0 [ 238.379363][ T9195] ? __sys_bpf+0xd0d/0xd90 [ 238.379384][ T9195] ? __x64_sys_bpf+0xba/0xd0 [ 238.379403][ T9195] ? do_syscall_64+0x174/0x580 [ 238.379430][ T9195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.379453][ T9195] alloc_pages_mpol+0x212/0x380 [ 238.379485][ T9195] alloc_pages_noprof+0xac/0x2a0 [ 238.379514][ T9195] get_free_pages_noprof+0xf/0x80 [ 238.379539][ T9195] __kasan_populate_vmalloc+0x38/0x1c0 [ 238.379560][ T9195] ? do_raw_spin_unlock+0xf5/0x210 [ 238.379584][ T9195] alloc_vmap_area+0xd1a/0x1420 [ 238.379619][ T9195] ? __pfx_alloc_vmap_area+0x10/0x10 [ 238.379640][ T9195] ? __kmalloc_cache_node_noprof+0x1f2/0x630 [ 238.379663][ T9195] ? __get_vm_area_node+0x136/0x300 [ 238.379682][ T9195] ? __get_vm_area_node+0x136/0x300 [ 238.379707][ T9195] __get_vm_area_node+0x1f2/0x300 [ 238.379735][ T9195] __vmalloc_node_range_noprof+0x358/0x1730 [ 238.379758][ T9195] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 238.379786][ T9195] ? __lock_acquire+0x683/0x2cf0 [ 238.379833][ T9195] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 238.379857][ T9195] ? aa_file_perm+0x18b/0x15f0 [ 238.379887][ T9195] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 238.379908][ T9195] __vmalloc_noprof+0xd2/0x120 [ 238.379929][ T9195] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 238.379955][ T9195] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 238.379977][ T9195] ? bpf_prog_alloc+0x2a/0x1a0 [ 238.380003][ T9195] bpf_prog_alloc+0x3c/0x1a0 [ 238.380028][ T9195] bpf_prog_load+0x7f8/0x1c00 [ 238.380064][ T9195] ? __pfx_bpf_prog_load+0x10/0x10 [ 238.380122][ T9195] __sys_bpf+0xd0d/0xd90 [ 238.380155][ T9195] ? __pfx___sys_bpf+0x10/0x10 [ 238.380190][ T9195] ? __fget_files+0x2a/0x420 [ 238.380232][ T9195] ? ksys_write+0x242/0x270 [ 238.380262][ T9195] ? __pfx_ksys_write+0x10/0x10 [ 238.380295][ T9195] __x64_sys_bpf+0xba/0xd0 [ 238.380317][ T9195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.380338][ T9195] do_syscall_64+0x174/0x580 [ 238.380363][ T9195] ? trace_irq_disable+0x3b/0x140 [ 238.380385][ T9195] ? clear_bhb_loop+0x70/0xc0 [ 238.380408][ T9195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.380427][ T9195] RIP: 0033:0x7f90d739e0d9 [ 238.380445][ T9195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.380461][ T9195] RSP: 002b:00007f90d82cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 238.380483][ T9195] RAX: ffffffffffffffda RBX: 00007f90d7625fa0 RCX: 00007f90d739e0d9 [ 238.380497][ T9195] RDX: 00000000000000a8 RSI: 0000200000000480 RDI: 0000000000000005 [ 238.380509][ T9195] RBP: 00007f90d82cd090 R08: 0000000000000000 R09: 0000000000000000 [ 238.380520][ T9195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.380531][ T9195] R13: 00007f90d7626038 R14: 00007f90d7625fa0 R15: 00007ffd6d298c58 [ 238.380567][ T9195] [ 238.380624][ T9195] syz.1.1085: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 238.814394][ T9195] CPU: 1 UID: 0 PID: 9195 Comm: syz.1.1085 Not tainted syzkaller #0 PREEMPT(full) [ 238.814422][ T9195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 238.814434][ T9195] Call Trace: [ 238.814441][ T9195] [ 238.814449][ T9195] dump_stack_lvl+0xe8/0x150 [ 238.814491][ T9195] warn_alloc+0x24c/0x270 [ 238.814516][ T9195] ? kasan_quarantine_put+0xbb/0x1f0 [ 238.814543][ T9195] ? __pfx_warn_alloc+0x10/0x10 [ 238.814569][ T9195] ? __get_vm_area_node+0x20b/0x300 [ 238.814595][ T9195] ? __get_vm_area_node+0x20b/0x300 [ 238.814622][ T9195] __vmalloc_node_range_noprof+0x37d/0x1730 [ 238.814647][ T9195] ? __lock_acquire+0x683/0x2cf0 [ 238.814693][ T9195] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 238.814715][ T9195] ? aa_file_perm+0x18b/0x15f0 [ 238.814745][ T9195] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 238.814768][ T9195] __vmalloc_noprof+0xd2/0x120 [ 238.814790][ T9195] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 238.814817][ T9195] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 238.814840][ T9195] ? bpf_prog_alloc+0x2a/0x1a0 [ 238.814866][ T9195] bpf_prog_alloc+0x3c/0x1a0 [ 238.814892][ T9195] bpf_prog_load+0x7f8/0x1c00 [ 238.814929][ T9195] ? __pfx_bpf_prog_load+0x10/0x10 [ 238.814979][ T9195] __sys_bpf+0xd0d/0xd90 [ 238.815011][ T9195] ? __pfx___sys_bpf+0x10/0x10 [ 238.815043][ T9195] ? __fget_files+0x2a/0x420 [ 238.815086][ T9195] ? ksys_write+0x242/0x270 [ 238.815116][ T9195] ? __pfx_ksys_write+0x10/0x10 [ 238.815149][ T9195] __x64_sys_bpf+0xba/0xd0 [ 238.815170][ T9195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.815191][ T9195] do_syscall_64+0x174/0x580 [ 238.815218][ T9195] ? trace_irq_disable+0x3b/0x140 [ 238.815240][ T9195] ? clear_bhb_loop+0x70/0xc0 [ 238.815264][ T9195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.815283][ T9195] RIP: 0033:0x7f90d739e0d9 [ 238.815301][ T9195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.815316][ T9195] RSP: 002b:00007f90d82cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 238.815341][ T9195] RAX: ffffffffffffffda RBX: 00007f90d7625fa0 RCX: 00007f90d739e0d9 [ 238.815355][ T9195] RDX: 00000000000000a8 RSI: 0000200000000480 RDI: 0000000000000005 [ 238.815367][ T9195] RBP: 00007f90d82cd090 R08: 0000000000000000 R09: 0000000000000000 [ 238.815378][ T9195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.815389][ T9195] R13: 00007f90d7626038 R14: 00007f90d7625fa0 R15: 00007ffd6d298c58 [ 238.815421][ T9195] [ 238.815557][ T9195] Mem-Info: [ 239.075634][ T9195] active_anon:5889 inactive_anon:0 isolated_anon:0 [ 239.075634][ T9195] active_file:0 inactive_file:43417 isolated_file:0 [ 239.075634][ T9195] unevictable:0 dirty:146 writeback:0 [ 239.075634][ T9195] slab_reclaimable:10019 slab_unreclaimable:99114 [ 239.075634][ T9195] mapped:31813 shmem:522 pagetables:1280 [ 239.075634][ T9195] sec_pagetables:0 bounce:0 [ 239.075634][ T9195] kernel_misc_reclaimable:0 [ 239.075634][ T9195] free:1317713 free_pcp:9443 free_cma:0 [ 239.157645][ T9195] Node 0 active_anon:23556kB inactive_anon:0kB active_file:0kB inactive_file:173460kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127252kB dirty:584kB writeback:0kB shmem:2088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12844kB pagetables:4956kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 239.192206][ T9195] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 239.224732][ T9195] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 239.258035][ T9195] lowmem_reserve[]: 0 2488 2488 2488 2488 [ 239.264512][ T9195] Node 0 DMA32 free:1311752kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23456kB inactive_anon:0kB active_file:0kB inactive_file:173460kB unevictable:0kB writepending:584kB zspages:0kB present:3129332kB managed:2548392kB mlocked:0kB bounce:0kB free_pcp:38604kB local_pcp:19460kB free_cma:0kB [ 239.305238][ T9195] lowmem_reserve[]: 0 0 0 0 0 [ 239.312739][ T9195] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:256kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 239.369597][ T9195] lowmem_reserve[]: 0 0 0 0 0 [ 239.412160][ T9195] Node 1 Normal free:3942972kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 239.454053][ T9195] lowmem_reserve[]: 0 0 0 0 0 [ 239.460814][ T9195] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 239.473848][ T9195] Node 0 DMA32: 684*4kB (UME) 287*8kB (UME) 184*16kB (UME) 83*32kB (UME) 84*64kB (UME) 55*128kB (UME) 18*256kB (UME) 12*512kB (UM) 10*1024kB (UME) 13*2048kB (UME) 303*4096kB (UM) = 1311752kB [ 239.504957][ T9195] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 239.516952][ T9195] Node 1 Normal: 1*4kB (M) 3*8kB (UM) 8*16kB (UM) 3*32kB (UM) 9*64kB (UM) 6*128kB (UM) 2*256kB (M) 3*512kB (UM) 3*1024kB (UM) 0*2048kB 961*4096kB (UM) = 3942972kB [ 239.533712][ T9195] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 239.543610][ T9195] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 239.562391][ T9195] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 239.572134][ T9195] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 239.581581][ T9195] 43935 total pagecache pages [ 239.586639][ T9195] 0 pages in swap cache [ 239.590851][ T9195] Free swap = 124996kB [ 239.595459][ T9195] Total swap = 124996kB [ 239.599661][ T9195] 2097051 pages RAM [ 239.603484][ T9195] 0 pages HighMem/MovableOnly [ 239.608347][ T9195] 428274 pages reserved [ 239.612554][ T9195] 0 pages cma reserved [ 240.847943][ T9226] mac80211_hwsim hwsim4 »»»»»»: renamed from wlan0 (while UP) [ 241.032782][ T9232] netlink: 'syz.4.1097': attribute type 7 has an invalid length. [ 241.146525][ T9237] syzkaller0: tun_chr_ioctl cmd 35108 [ 241.814298][ T66] net_ratelimit: 929 callbacks suppressed [ 241.814315][ T66] bond12: (slave batadv0): failed to get link speed/duplex [ 241.934316][ T449] bond12: (slave batadv0): failed to get link speed/duplex [ 241.944312][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.044286][ T58] bond12: (slave batadv0): failed to get link speed/duplex [ 242.154335][ T13] bond12: (slave batadv0): failed to get link speed/duplex [ 242.265516][ T449] bond12: (slave batadv0): failed to get link speed/duplex [ 242.374296][ T66] bond12: (slave batadv0): failed to get link speed/duplex [ 242.424833][ T5805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.484272][ T66] bond12: (slave batadv0): failed to get link speed/duplex [ 242.594326][ T13] bond12: (slave batadv0): failed to get link speed/duplex [ 246.904588][ T449] net_ratelimit: 51 callbacks suppressed [ 246.904610][ T449] bond12: (slave batadv0): failed to get link speed/duplex [ 247.024401][ T66] bond12: (slave batadv0): failed to get link speed/duplex [ 247.144495][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.152799][ T58] bond12: (slave batadv0): failed to get link speed/duplex [ 247.264333][ T48] bond12: (slave batadv0): failed to get link speed/duplex [ 247.374282][ T48] bond12: (slave batadv0): failed to get link speed/duplex [ 247.484426][ T48] bond12: (slave batadv0): failed to get link speed/duplex [ 247.594360][ T13] bond12: (slave batadv0): failed to get link speed/duplex [ 247.625029][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.704685][ T449] bond12: (slave batadv0): failed to get link speed/duplex [ 250.784351][ T9251] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1104'. [ 250.822639][ T9256] netlink: 'syz.0.1102': attribute type 1 has an invalid length. [ 250.951478][ T9256] 8021q: adding VLAN 0 to HW filter on device bond1 [ 251.042719][ T9270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1110'. [ 251.094549][ T9268] x_tables: duplicate underflow at hook 3 [ 251.852992][ T9293] FAULT_INJECTION: forcing a failure. [ 251.852992][ T9293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.904629][ T9293] CPU: 1 UID: 0 PID: 9293 Comm: syz.1.1117 Not tainted syzkaller #0 PREEMPT(full) [ 251.904661][ T9293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 251.904676][ T9293] Call Trace: [ 251.904684][ T9293] [ 251.904693][ T9293] dump_stack_lvl+0xe8/0x150 [ 251.904728][ T9293] should_fail_ex+0x40c/0x560 [ 251.904757][ T9293] _copy_from_user+0x2d/0xb0 [ 251.904796][ T9293] sock_do_ioctl+0x195/0x320 [ 251.904827][ T9293] ? __pfx_sock_do_ioctl+0x10/0x10 [ 251.904854][ T9293] ? hook_file_ioctl+0x1f0/0x5f0 [ 251.904899][ T9293] sock_ioctl+0x57a/0x7e0 [ 251.904930][ T9293] ? __pfx_sock_ioctl+0x10/0x10 [ 251.904958][ T9293] ? __fget_files+0x2a/0x420 [ 251.904982][ T9293] ? __fget_files+0x3a2/0x420 [ 251.905004][ T9293] ? __fget_files+0x2a/0x420 [ 251.905032][ T9293] ? bpf_lsm_file_ioctl+0x9/0x20 [ 251.905054][ T9293] ? __pfx_sock_ioctl+0x10/0x10 [ 251.905080][ T9293] __se_sys_ioctl+0xfc/0x170 [ 251.905100][ T9293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.905121][ T9293] do_syscall_64+0x174/0x580 [ 251.905146][ T9293] ? trace_irq_disable+0x3b/0x140 [ 251.905170][ T9293] ? clear_bhb_loop+0x70/0xc0 [ 251.905194][ T9293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.905214][ T9293] RIP: 0033:0x7f90d739e0d9 [ 251.905233][ T9293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.905250][ T9293] RSP: 002b:00007f90d82cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 251.905271][ T9293] RAX: ffffffffffffffda RBX: 00007f90d7625fa0 RCX: 00007f90d739e0d9 [ 251.905285][ T9293] RDX: 0000200000000000 RSI: 0000000000008943 RDI: 0000000000000004 [ 251.905297][ T9293] RBP: 00007f90d82cd090 R08: 0000000000000000 R09: 0000000000000000 [ 251.905309][ T9293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.905320][ T9293] R13: 00007f90d7626038 R14: 00007f90d7625fa0 R15: 00007ffd6d298c58 [ 251.905354][ T9293] [ 252.288704][ T58] net_ratelimit: 49 callbacks suppressed [ 252.288728][ T58] bond12: (slave batadv0): failed to get link speed/duplex [ 252.344300][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.434953][ T58] bond12: (slave batadv0): failed to get link speed/duplex [ 252.536415][ T9302] syzkaller0: entered promiscuous mode [ 252.568777][ T9302] syzkaller0: entered allmulticast mode [ 252.604365][ T58] bond12: (slave batadv0): failed to get link speed/duplex [ 252.754940][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 252.825258][ T5805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.842164][ T66] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.851798][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.863104][ T5805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.874843][ T66] bond12: (slave batadv0): failed to get link speed/duplex [ 255.705725][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.394270][ T13] net_ratelimit: 53 callbacks suppressed [ 257.394295][ T13] bond12: (slave batadv0): failed to get link speed/duplex [ 257.514284][ T66] bond12: (slave batadv0): failed to get link speed/duplex [ 257.544355][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.624676][ T13] bond12: (slave batadv0): failed to get link speed/duplex [ 257.734277][ T449] bond12: (slave batadv0): failed to get link speed/duplex [ 257.844322][ T13] bond12: (slave batadv0): failed to get link speed/duplex [ 257.954261][ T449] bond12: (slave batadv0): failed to get link speed/duplex [ 258.064328][ T66] bond12: (slave batadv0): failed to get link speed/duplex [ 258.106520][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.174285][ T13] bond12: (slave batadv0): failed to get link speed/duplex [ 262.424398][ T5727] net_ratelimit: 53 callbacks suppressed [ 262.424413][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.494539][ T13] bond12: (slave batadv0): failed to get link speed/duplex [ 262.605412][ T449] bond12: (slave batadv0): failed to get link speed/duplex [ 262.714446][ T13] bond12: (slave batadv0): failed to get link speed/duplex [ 262.744573][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.825523][ T13] bond12: (slave batadv0): failed to get link speed/duplex [ 262.934440][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 263.045506][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 263.154974][ T449] bond12: (slave batadv0): failed to get link speed/duplex [ 263.264390][ T13] bond12: (slave batadv0): failed to get link speed/duplex [ 267.454260][ T58] net_ratelimit: 49 callbacks suppressed [ 267.454277][ T58] bond12: (slave batadv0): failed to get link speed/duplex [ 267.575309][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 267.624683][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.684438][ T13] bond12: (slave batadv0): failed to get link speed/duplex [ 267.794323][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 267.904403][ T58] bond12: (slave batadv0): failed to get link speed/duplex [ 267.944372][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.014311][ T13] bond12: (slave batadv0): failed to get link speed/duplex [ 268.124354][ T13] bond12: (slave batadv0): failed to get link speed/duplex [ 268.234336][ T13] bond12: (slave batadv0): failed to get link speed/duplex [ 272.544299][ T66] net_ratelimit: 48 callbacks suppressed [ 272.544324][ T66] bond12: (slave batadv0): failed to get link speed/duplex [ 272.675773][ T58] bond12: (slave batadv0): failed to get link speed/duplex [ 272.784805][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 272.824568][ T5805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.895412][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 273.004394][ T58] bond12: (slave batadv0): failed to get link speed/duplex [ 273.114374][ T13] bond12: (slave batadv0): failed to get link speed/duplex [ 273.154319][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.224316][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 273.334358][ T58] bond12: (slave batadv0): failed to get link speed/duplex [ 277.644317][ T449] net_ratelimit: 49 callbacks suppressed [ 277.644340][ T449] bond12: (slave batadv0): failed to get link speed/duplex [ 277.764367][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 277.874315][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 277.984352][ T58] bond12: (slave batadv0): failed to get link speed/duplex [ 278.024921][ T5805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.094333][ T449] bond12: (slave batadv0): failed to get link speed/duplex [ 278.204485][ T13] bond12: (slave batadv0): failed to get link speed/duplex [ 278.314280][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 278.424337][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 278.534289][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 282.734327][ T58] net_ratelimit: 46 callbacks suppressed [ 282.734351][ T58] bond12: (slave batadv0): failed to get link speed/duplex [ 282.854361][ T58] bond12: (slave batadv0): failed to get link speed/duplex [ 282.964298][ T13] bond12: (slave batadv0): failed to get link speed/duplex [ 283.074310][ T58] bond12: (slave batadv0): failed to get link speed/duplex [ 283.184339][ T58] bond12: (slave batadv0): failed to get link speed/duplex [ 283.224675][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.233191][ T5805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.241338][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.294494][ T13] bond12: (slave batadv0): failed to get link speed/duplex [ 283.384292][ T5627] Bluetooth: hci4: command 0x0405 tx timeout [ 283.404744][ T58] bond12: (slave batadv0): failed to get link speed/duplex [ 287.688060][ T29] audit: type=1804 audit(1786996277.320:12): pid=9322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1126" name="/newroot/212/cgroup.controllers" dev="tmpfs" ino=1100 res=1 errno=0 [ 287.734955][ T29] audit: type=1800 audit(1786996277.320:13): pid=9322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1126" name="cgroup.controllers" dev="tmpfs" ino=1100 res=0 errno=0 [ 287.757384][ T29] audit: type=1804 audit(1786996277.350:14): pid=9322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1126" name="/newroot/212/cgroup.controllers" dev="tmpfs" ino=1100 res=1 errno=0 [ 287.758442][ T449] net_ratelimit: 48 callbacks suppressed [ 287.758456][ T449] bond12: (slave batadv0): failed to get link speed/duplex [ 287.975095][ T48] bond12: (slave batadv0): failed to get link speed/duplex [ 288.096879][ T9343] syzkaller0: entered promiscuous mode [ 288.110334][ T9343] syzkaller0: entered allmulticast mode [ 288.134988][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 288.254780][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 288.270435][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.279802][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.370508][ T9348] bridge0: port 3(syz_tun) entered blocking state [ 288.378175][ T9348] bridge0: port 3(syz_tun) entered disabled state [ 288.396384][ T9348] syz_tun: entered promiscuous mode [ 288.414507][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 288.425356][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.577932][ T13] bond12: (slave batadv0): failed to get link speed/duplex [ 288.774290][ T13] bond12: (slave batadv0): failed to get link speed/duplex [ 288.973145][ T9375] xt_SECMARK: invalid mode: 9 [ 288.996445][ T9373] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1143'. [ 289.133755][ T9386] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 289.270584][ T9392] netlink: 'syz.1.1148': attribute type 1 has an invalid length. [ 289.398359][ T9392] 8021q: adding VLAN 0 to HW filter on device bond13 [ 289.429768][ T9394] bond13: (slave gretap1): Enslaving as a backup interface with an up link [ 289.794097][ T5727] team_slave_1: entered promiscuous mode [ 289.805128][ T9401] trusted_key: syz.2.1151 sent an empty control message without MSG_MORE. [ 289.885932][ T9409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1153'. [ 289.911938][ T9402] syz.2.1151 (9402) used greatest stack depth: 17520 bytes left [ 289.912118][ T5727] team_slave_1: left promiscuous mode [ 289.943303][ T9409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1153'. [ 290.168684][ T9419] ip6tnl1: entered allmulticast mode [ 290.240353][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 290.282442][ T5342] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 290.305529][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 290.862215][ T9444] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 290.964409][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 291.062610][ T9447] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1163'. [ 291.224713][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 291.293840][ T9459] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 291.328384][ T9459] netlink: 'syz.0.1166': attribute type 4 has an invalid length. [ 291.352893][ T9459] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1166'. [ 291.386274][ T9459] .`: renamed from bond0 (while UP) [ 291.800181][ T9477] netlink: 'syz.4.1171': attribute type 11 has an invalid length. [ 291.808576][ T9477] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1171'. [ 291.966138][ T9486] FAULT_INJECTION: forcing a failure. [ 291.966138][ T9486] name failslab, interval 1, probability 0, space 0, times 0 [ 291.996845][ T9486] CPU: 0 UID: 0 PID: 9486 Comm: syz.3.1173 Not tainted syzkaller #0 PREEMPT(full) [ 291.996873][ T9486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 291.996884][ T9486] Call Trace: [ 291.996891][ T9486] [ 291.996899][ T9486] dump_stack_lvl+0xe8/0x150 [ 291.996931][ T9486] should_fail_ex+0x40c/0x560 [ 291.996959][ T9486] should_failslab+0xa8/0x100 [ 291.996987][ T9486] __kmalloc_cache_noprof+0xa8/0x660 [ 291.997012][ T9486] ? nft_pernet+0x23/0x240 [ 291.997033][ T9486] ? nf_tables_newtable+0x43e/0x1990 [ 291.997052][ T9486] ? nf_tables_newtable+0x43e/0x1990 [ 291.997078][ T9486] nf_tables_newtable+0x43e/0x1990 [ 291.997119][ T9486] nfnetlink_rcv+0x1288/0x28c0 [ 291.997179][ T9486] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 291.997219][ T9486] ? ref_tracker_free+0x689/0x830 [ 291.997271][ T9486] ? skb_clone+0x246/0x3a0 [ 291.997299][ T9486] ? __netlink_deliver_tap+0x811/0x860 [ 291.997334][ T9486] ? netlink_deliver_tap+0x2e/0x1b0 [ 291.997358][ T9486] ? netlink_deliver_tap+0x2e/0x1b0 [ 291.997388][ T9486] netlink_unicast+0x7bb/0x940 [ 291.997433][ T9486] netlink_sendmsg+0x813/0xb40 [ 291.997469][ T9486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.997499][ T9486] ? aa_sock_msg_perm+0xf1/0x1b0 [ 291.997524][ T9486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.997547][ T9486] sock_sendmsg_nosec+0x13a/0x180 [ 291.997578][ T9486] ____sys_sendmsg+0x54e/0x850 [ 291.997608][ T9486] ? __pfx_____sys_sendmsg+0x10/0x10 [ 291.997641][ T9486] ? import_iovec+0x73/0xa0 [ 291.997671][ T9486] ___sys_sendmsg+0x2a5/0x360 [ 291.997693][ T9486] ? __lock_acquire+0x683/0x2cf0 [ 291.997721][ T9486] ? __pfx____sys_sendmsg+0x10/0x10 [ 291.997785][ T9486] ? __fget_files+0x2a/0x420 [ 291.997809][ T9486] ? __fget_files+0x3a2/0x420 [ 291.997841][ T9486] __x64_sys_sendmsg+0x1b1/0x290 [ 291.997868][ T9486] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 291.997910][ T9486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.997932][ T9486] do_syscall_64+0x174/0x580 [ 291.997957][ T9486] ? trace_irq_disable+0x3b/0x140 [ 291.997980][ T9486] ? clear_bhb_loop+0x70/0xc0 [ 291.998004][ T9486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.998023][ T9486] RIP: 0033:0x7fbe8f59e0d9 [ 291.998041][ T9486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.998057][ T9486] RSP: 002b:00007fbe8d7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.998079][ T9486] RAX: ffffffffffffffda RBX: 00007fbe8f825fa0 RCX: 00007fbe8f59e0d9 [ 291.998092][ T9486] RDX: 0000000024004000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 291.998104][ T9486] RBP: 00007fbe8d7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 291.998116][ T9486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.998126][ T9486] R13: 00007fbe8f826038 R14: 00007fbe8f825fa0 R15: 00007ffe5967dc08 [ 291.998159][ T9486] [ 292.426836][ T9465] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 292.610692][ T9505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1175'. [ 292.787149][ T449] net_ratelimit: 36 callbacks suppressed [ 292.787171][ T449] bond12: (slave batadv0): failed to get link speed/duplex [ 292.861693][ T9517] syz.0.1178: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 292.905478][ T9517] CPU: 1 UID: 0 PID: 9517 Comm: syz.0.1178 Not tainted syzkaller #0 PREEMPT(full) [ 292.905508][ T9517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 292.905521][ T9517] Call Trace: [ 292.905529][ T9517] [ 292.905538][ T9517] dump_stack_lvl+0xe8/0x150 [ 292.905573][ T9517] warn_alloc+0x24c/0x270 [ 292.905606][ T9517] ? __pfx_warn_alloc+0x10/0x10 [ 292.905628][ T9517] ? xskq_create+0x56/0x220 [ 292.905654][ T9517] ? xsk_setsockopt+0x52a/0x960 [ 292.905677][ T9517] ? do_syscall_64+0x174/0x580 [ 292.905702][ T9517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.905740][ T9517] __vmalloc_node_range_noprof+0x12c/0x1730 [ 292.905796][ T9517] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 292.905819][ T9517] ? __kmalloc_cache_noprof+0x32d/0x660 [ 292.905843][ T9517] ? __kmalloc_cache_noprof+0x150/0x660 [ 292.905865][ T9517] ? xskq_create+0x56/0x220 [ 292.905895][ T9517] xskq_create+0x148/0x220 [ 292.905919][ T9517] ? xsk_init_queue+0x8a/0xe0 [ 292.905946][ T9517] xsk_init_queue+0x8a/0xe0 [ 292.905973][ T9517] xsk_setsockopt+0x52a/0x960 [ 292.905996][ T9517] ? __fget_files+0x2a/0x420 [ 292.906021][ T9517] ? __pfx_xsk_setsockopt+0x10/0x10 [ 292.906044][ T9517] ? __pfx_aa_sk_perm+0x10/0x10 [ 292.906077][ T9517] ? aa_sock_opt_perm+0xff/0x1a0 [ 292.906099][ T9517] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 292.906119][ T9517] ? __pfx_xsk_setsockopt+0x10/0x10 [ 292.906146][ T9517] do_sock_setsockopt+0x17c/0x1b0 [ 292.906177][ T9517] __x64_sys_setsockopt+0x13d/0x1b0 [ 292.906214][ T9517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.906237][ T9517] do_syscall_64+0x174/0x580 [ 292.906265][ T9517] ? trace_irq_disable+0x3b/0x140 [ 292.906289][ T9517] ? clear_bhb_loop+0x70/0xc0 [ 292.906315][ T9517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.906336][ T9517] RIP: 0033:0x7f36f259e0d9 [ 292.906356][ T9517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.906372][ T9517] RSP: 002b:00007f36f33cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 292.906394][ T9517] RAX: ffffffffffffffda RBX: 00007f36f2826090 RCX: 00007f36f259e0d9 [ 292.906409][ T9517] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 292.906422][ T9517] RBP: 00007f36f2635024 R08: 0000000000000004 R09: 0000000000000000 [ 292.906434][ T9517] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.906447][ T9517] R13: 00007f36f2826128 R14: 00007f36f2826090 R15: 00007fff6f72f288 [ 292.906483][ T9517] [ 292.906491][ T9517] Mem-Info: [ 292.944332][ T3368] bond12: (slave batadv0): failed to get link speed/duplex [ 293.073883][ T9525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1181'. [ 293.082560][ T9517] active_anon:5713 inactive_anon:0 isolated_anon:0 [ 293.082560][ T9517] active_file:0 inactive_file:43493 isolated_file:0 [ 293.082560][ T9517] unevictable:0 dirty:218 writeback:0 [ 293.082560][ T9517] slab_reclaimable:9941 slab_unreclaimable:96626 [ 293.082560][ T9517] mapped:31595 shmem:522 pagetables:1288 [ 293.082560][ T9517] sec_pagetables:0 bounce:0 [ 293.082560][ T9517] kernel_misc_reclaimable:0 [ 293.082560][ T9517] free:1315936 free_pcp:12982 free_cma:0 [ 293.111211][ T9525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1181'. [ 293.119057][ T9528] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 293.222643][ T66] bond12: (slave batadv0): failed to get link speed/duplex [ 293.230362][ T9517] Node 0 active_anon:22852kB inactive_anon:0kB active_file:0kB inactive_file:173764kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:126680kB dirty:868kB writeback:0kB shmem:2088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12904kB pagetables:4988kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 293.299138][ T9517] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 293.372470][ T9517] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 293.404484][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.423012][ T9517] lowmem_reserve[]: 0 2488 2488 2488 2488 [ 293.429284][ T9517] Node 0 DMA32 free:1304692kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23252kB inactive_anon:0kB active_file:0kB inactive_file:173764kB unevictable:0kB writepending:868kB zspages:0kB present:3129332kB managed:2548392kB mlocked:0kB bounce:0kB free_pcp:52408kB local_pcp:26040kB free_cma:0kB [ 293.462794][ T9517] lowmem_reserve[]: 0 0 0 0 0 [ 293.473959][ T9517] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:256kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 293.508546][ T9517] lowmem_reserve[]: 0 0 0 0 0 [ 293.515008][ T9517] Node 1 Normal free:3942972kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 293.580970][ T9517] lowmem_reserve[]: 0 0 0 0 0 [ 293.586327][ T9517] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 293.601437][ T9517] Node 0 DMA32: 3391*4kB (UM) 2199*8kB (UM) 1193*16kB (UME) 219*32kB (UME) 73*64kB (UME) 35*128kB (UME) 11*256kB (UME) 3*512kB (M) 3*1024kB (ME) 5*2048kB (UME) 298*4096kB (UM) = 1304676kB [ 293.644364][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.652786][ T9517] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 293.654221][ T3368] bond12: (slave batadv0): failed to get link speed/duplex [ 293.682214][ T9517] Node 1 Normal: 1*4kB (M) 3*8kB (UM) 8*16kB (UM) 3*32kB (UM) 9*64kB (UM) 6*128kB (UM) 2*256kB (M) 3*512kB (UM) 3*1024kB (UM) 0*2048kB 961*4096kB (UM) = 3942972kB [ 293.706087][ T9517] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 293.716092][ T9517] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 293.741428][ T9517] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 293.770332][ T9517] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 293.806021][ T66] bond12: (slave batadv0): failed to get link speed/duplex [ 293.824680][ T9517] 44061 total pagecache pages [ 293.841229][ T9517] 0 pages in swap cache [ 293.867440][ T9517] Free swap = 124996kB [ 293.881848][ T9517] Total swap = 124996kB [ 293.897812][ T9517] 2097051 pages RAM [ 293.916926][ T3368] bond12: (slave batadv0): failed to get link speed/duplex [ 293.916957][ T9517] 0 pages HighMem/MovableOnly [ 293.961588][ T9517] 428274 pages reserved [ 293.974660][ T9517] 0 pages cma reserved [ 294.024298][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 294.037613][ T3368] bond12: (slave batadv0): failed to get link speed/duplex [ 294.306047][ T9562] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1191'. [ 294.336213][ T9562] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1191'. [ 294.933664][ T9581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1197'. [ 295.949919][ T9606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1206'. [ 296.194645][ T9611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1208'. [ 297.174337][ T9645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1221'. [ 297.237269][ T9647] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 297.259273][ T9647] bond2 (unregistering): Released all slaves [ 297.804541][ T58] net_ratelimit: 45 callbacks suppressed [ 297.804563][ T58] bond12: (slave batadv0): failed to get link speed/duplex [ 297.853296][ T9670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1227'. [ 297.948028][ T58] bond12: (slave batadv0): failed to get link speed/duplex [ 298.012101][ T29] audit: type=1804 audit(1786996287.640:15): pid=9676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1229" name="/newroot/242/cgroup.controllers" dev="tmpfs" ino=1254 res=1 errno=0 [ 298.038336][ T29] audit: type=1800 audit(1786996287.640:16): pid=9676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1229" name="cgroup.controllers" dev="tmpfs" ino=1254 res=0 errno=0 [ 298.065271][ T3368] bond12: (slave batadv0): failed to get link speed/duplex [ 298.077677][ T9677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1228'. [ 298.088704][ T29] audit: type=1804 audit(1786996287.650:17): pid=9676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1229" name="/newroot/242/cgroup.controllers" dev="tmpfs" ino=1254 res=1 errno=0 [ 298.215782][ T58] bond12: (slave batadv0): failed to get link speed/duplex [ 298.324287][ T3368] bond12: (slave batadv0): failed to get link speed/duplex [ 298.434266][ T58] bond12: (slave batadv0): failed to get link speed/duplex [ 298.554269][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 298.584557][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.664291][ T66] bond12: (slave batadv0): failed to get link speed/duplex [ 298.774270][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 300.142838][ T9644] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 300.382455][ T9691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1234'. [ 300.402795][ T9686] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1231'. [ 300.609419][ T9698] raw_sendmsg: syz.0.1237 forgot to set AF_INET. Fix it! [ 300.706302][ T9704] ip6t_srh: unknown srh invflags 4000 [ 301.144318][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 302.834293][ T66] net_ratelimit: 44 callbacks suppressed [ 302.834315][ T66] bond12: (slave batadv0): failed to get link speed/duplex [ 302.954276][ T3368] bond12: (slave batadv0): failed to get link speed/duplex [ 302.986158][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.074675][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 303.184252][ T3368] bond12: (slave batadv0): failed to get link speed/duplex [ 303.294253][ T3368] bond12: (slave batadv0): failed to get link speed/duplex [ 303.404238][ T58] bond12: (slave batadv0): failed to get link speed/duplex [ 303.514302][ T58] bond12: (slave batadv0): failed to get link speed/duplex [ 303.572481][ T9698] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 303.589189][ T9729] netlink: 'syz.3.1243': attribute type 1 has an invalid length. [ 303.609142][ T9729] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1243'. [ 303.629355][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 303.660791][ T9729] netlink: 'syz.3.1243': attribute type 1 has an invalid length. [ 303.784371][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.798404][ T9733] syzkaller1: entered promiscuous mode [ 303.816055][ T9733] syzkaller1: entered allmulticast mode [ 303.901858][ T9741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1244'. [ 304.740453][ T9778] netlink: 'syz.2.1256': attribute type 1 has an invalid length. [ 304.957894][ T9782] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1258'. [ 305.217562][ T9791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1262'. [ 305.298264][ T9794] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1500) ! [ 305.309048][ T9794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1264'. [ 305.318434][ T9794] sch_tbf: peakrate 12 is lower than or equals to rate 3850 ! [ 305.682566][ T9807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1268'. [ 305.753019][ T9810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1269'. [ 306.534569][ T9835] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1276'. [ 307.010965][ T9858] macsec0: entered promiscuous mode [ 307.023025][ T9858] macsec0: left allmulticast mode [ 307.058188][ T29] audit: type=1800 audit(1786996296.690:18): pid=9861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1283" name="memory.events" dev="tmpfs" ino=1341 res=0 errno=0 [ 307.303824][ T9870] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1287'. [ 307.360800][ T9870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1287'. [ 307.374004][ T9873] netlink: 'syz.1.1288': attribute type 11 has an invalid length. [ 307.397658][ T9873] netlink: 'syz.1.1288': attribute type 4 has an invalid length. [ 307.416686][ T9873] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1288'. [ 307.441910][ T9877] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1287'. [ 307.614617][ T9881] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1291'. [ 307.743451][ T9891] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1295'. [ 307.854251][ T3368] net_ratelimit: 43 callbacks suppressed [ 307.854272][ T3368] bond12: (slave batadv0): failed to get link speed/duplex [ 307.864246][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.007318][ T3368] bond12: (slave batadv0): failed to get link speed/duplex [ 308.146174][ T449] bond12: (slave batadv0): failed to get link speed/duplex [ 308.181190][ T9906] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 308.185676][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.279922][ T13] bond12: (slave batadv0): failed to get link speed/duplex [ 308.395571][ T13] bond12: (slave batadv0): failed to get link speed/duplex [ 308.528325][ T9921] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.571803][ T9915] syzkaller0: entered promiscuous mode [ 308.588214][ T9915] syzkaller0: entered allmulticast mode [ 308.614869][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 308.795944][ T9932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1305'. [ 308.909822][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.527879][T10035] __nla_validate_parse: 1 callbacks suppressed [ 312.527900][T10035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1336'. [ 313.005773][ T58] net_ratelimit: 30 callbacks suppressed [ 313.005794][ T58] bond12: (slave batadv0): failed to get link speed/duplex [ 313.051081][T10059] No such timeout policy "s" [ 313.072500][T10059] netlink: Failed to associated timeout policy 's' [ 313.156129][ T58] bond12: (slave batadv0): failed to get link speed/duplex [ 313.286695][ T449] bond12: (slave batadv0): failed to get link speed/duplex [ 313.360121][T10067] syzkaller0: entered promiscuous mode [ 313.377846][T10067] syzkaller0: entered allmulticast mode [ 313.390605][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.444218][ T449] bond12: (slave batadv0): failed to get link speed/duplex [ 313.605024][ T66] bond12: (slave batadv0): failed to get link speed/duplex [ 313.704251][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.735343][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 313.781562][T10084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1353'. [ 313.915309][ T66] bond12: (slave batadv0): failed to get link speed/duplex [ 314.210424][T10101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1359'. [ 314.345908][T10108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 314.412360][T10110] xt_hashlimit: size too large, truncated to 1048576 [ 314.484464][T10113] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.970689][T10136] netlink: 3344 bytes leftover after parsing attributes in process `syz.0.1370'. [ 315.407577][T10152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1376'. [ 315.485126][T10144] syzkaller0: entered promiscuous mode [ 315.510703][T10144] syzkaller0: entered allmulticast mode [ 315.747096][T10155] syzkaller0: entered promiscuous mode [ 315.756712][T10155] syzkaller0: entered allmulticast mode [ 315.864331][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 317.157996][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.100209][T10168] ip6tnl3: entered allmulticast mode [ 318.257465][T10213] netlink: 3344 bytes leftover after parsing attributes in process `syz.2.1382'. [ 318.584641][ T5727] net_ratelimit: 22 callbacks suppressed [ 318.584663][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.905363][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.439203][T10221] netlink: 'syz.3.1385': attribute type 23 has an invalid length. [ 319.496538][T10222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1385'. [ 319.635325][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.768986][ T13] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 319.777166][ T13] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 319.796612][ T9] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 319.884354][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 319.944287][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.036306][ T13] bond12: (slave batadv0): failed to get link speed/duplex [ 320.053470][T10230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1387'. [ 320.084531][ T9] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 320.204439][ T449] bond12: (slave batadv0): failed to get link speed/duplex [ 320.226279][T10242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1390'. [ 320.346390][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 320.585333][ T3368] bond12: (slave batadv0): failed to get link speed/duplex [ 320.667768][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.747863][ T9] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 320.991457][T10263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1393'. [ 321.094892][T10276] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1399'. [ 321.281751][T10284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1402'. [ 321.923509][T10309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1408'. [ 322.218197][T10318] batadv_slave_1: entered promiscuous mode [ 322.785812][T10338] syzkaller0: entered promiscuous mode [ 322.808383][T10338] syzkaller0: entered allmulticast mode [ 322.896741][T10345] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1421'. [ 323.047879][T10350] syzkaller0: entered promiscuous mode [ 323.077553][T10350] syzkaller0: entered allmulticast mode [ 323.091357][T10342] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1419'. [ 323.496920][T10366] netdevsim netdevsim2 €Â: renamed from netdevsim0 (while UP) [ 323.513831][ T29] audit: type=1804 audit(1786996313.140:19): pid=10369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1430" name="/newroot/276/cgroup.controllers" dev="tmpfs" ino=1421 res=1 errno=0 [ 323.538371][ T29] audit: type=1800 audit(1786996313.140:20): pid=10369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1430" name="cgroup.controllers" dev="tmpfs" ino=1421 res=0 errno=0 [ 323.561142][T10376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1433'. [ 323.562247][ T29] audit: type=1804 audit(1786996313.150:21): pid=10369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1430" name="/newroot/276/cgroup.controllers" dev="tmpfs" ino=1421 res=1 errno=0 [ 323.596651][T10366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1429'. [ 323.606307][ T449] net_ratelimit: 27 callbacks suppressed [ 323.606325][ T449] bond12: (slave batadv0): failed to get link speed/duplex [ 323.755843][ T449] bond12: (slave batadv0): failed to get link speed/duplex [ 323.786543][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.894565][ T449] bond12: (slave batadv0): failed to get link speed/duplex [ 324.104497][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 324.184365][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.206166][ T35] bond12: (slave batadv0): failed to get link speed/duplex [ 324.334370][ T35] bond12: (slave batadv0): failed to get link speed/duplex [ 324.353234][T10404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.465727][T10411] tipc: Started in network mode [ 324.470692][T10411] tipc: Node identity 1a63768eb963, cluster identity 4711 [ 324.479265][T10411] tipc: Enabled bearer , priority 0 [ 324.492192][T10411] syzkaller0: entered promiscuous mode [ 324.500972][T10411] syzkaller0: entered allmulticast mode [ 324.514459][ T48] bond12: (slave batadv0): failed to get link speed/duplex [ 324.530280][T10411] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 324.568331][T10411] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 324.595419][T10411] tipc: Resetting bearer [ 324.634881][ T48] bond12: (slave batadv0): failed to get link speed/duplex [ 324.766216][ T48] bond12: (slave batadv0): failed to get link speed/duplex [ 324.838966][T10419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1446'. [ 325.206110][T10402] tipc: Resetting bearer [ 325.237533][T10434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1450'. [ 325.292628][T10402] tipc: Disabling bearer [ 325.491943][ T1053] IPVS: starting estimator thread 0... [ 325.605523][T10447] IPVS: using max 30 ests per chain, 72000 per kthread [ 325.961632][T10462] netlink: 'syz.2.1462': attribute type 1 has an invalid length. [ 325.989054][T10462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1462'. [ 326.286848][T10491] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1469'. [ 326.479913][T10485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1467'. [ 326.674542][T10498] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1470'. [ 326.720500][T10499] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1470'. [ 326.984911][T10516] syzkaller0: entered promiscuous mode [ 327.006648][T10516] syzkaller0: entered allmulticast mode [ 327.034509][T10520] tipc: Started in network mode [ 327.054254][T10520] tipc: Node identity f6b0bb1474eb, cluster identity 4711 [ 327.082860][T10520] tipc: Enabled bearer , priority 0 [ 327.228023][T10532] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1481'. [ 327.425374][T10527] tipc: Resetting bearer [ 327.482825][T10515] tipc: Resetting bearer [ 327.549185][T10515] tipc: Disabling bearer [ 328.181528][T10569] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 328.313546][T10573] FAULT_INJECTION: forcing a failure. [ 328.313546][T10573] name failslab, interval 1, probability 0, space 0, times 0 [ 328.354269][T10573] CPU: 0 UID: 0 PID: 10573 Comm: syz.4.1496 Not tainted syzkaller #0 PREEMPT(full) [ 328.354298][T10573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 328.354309][T10573] Call Trace: [ 328.354317][T10573] [ 328.354325][T10573] dump_stack_lvl+0xe8/0x150 [ 328.354357][T10573] should_fail_ex+0x40c/0x560 [ 328.354387][T10573] should_failslab+0xa8/0x100 [ 328.354416][T10573] __kmalloc_cache_noprof+0xa8/0x660 [ 328.354443][T10573] ? nfnetlink_rcv+0x1021/0x28c0 [ 328.354465][T10573] ? nfnetlink_rcv+0x1021/0x28c0 [ 328.354495][T10573] nfnetlink_rcv+0x1021/0x28c0 [ 328.354556][T10573] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 328.354598][T10573] ? ref_tracker_free+0x689/0x830 [ 328.354650][T10573] ? skb_clone+0x246/0x3a0 [ 328.354680][T10573] ? __netlink_deliver_tap+0x811/0x860 [ 328.354715][T10573] ? netlink_deliver_tap+0x2e/0x1b0 [ 328.354738][T10573] ? netlink_deliver_tap+0x2e/0x1b0 [ 328.354768][T10573] netlink_unicast+0x7bb/0x940 [ 328.354804][T10573] netlink_sendmsg+0x813/0xb40 [ 328.354845][T10573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.354876][T10573] ? aa_sock_msg_perm+0xf1/0x1b0 [ 328.354902][T10573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.354926][T10573] sock_sendmsg_nosec+0x13a/0x180 [ 328.354958][T10573] ____sys_sendmsg+0x54e/0x850 [ 328.354987][T10573] ? __pfx_____sys_sendmsg+0x10/0x10 [ 328.355022][T10573] ? import_iovec+0x73/0xa0 [ 328.355053][T10573] ___sys_sendmsg+0x2a5/0x360 [ 328.355074][T10573] ? __lock_acquire+0x683/0x2cf0 [ 328.355104][T10573] ? __pfx____sys_sendmsg+0x10/0x10 [ 328.355166][T10573] ? __fget_files+0x2a/0x420 [ 328.355189][T10573] ? __fget_files+0x3a2/0x420 [ 328.355224][T10573] __x64_sys_sendmsg+0x1b1/0x290 [ 328.355259][T10573] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 328.355302][T10573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.355324][T10573] do_syscall_64+0x174/0x580 [ 328.355351][T10573] ? trace_irq_disable+0x3b/0x140 [ 328.355374][T10573] ? clear_bhb_loop+0x70/0xc0 [ 328.355398][T10573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.355416][T10573] RIP: 0033:0x7fac23b9e0d9 [ 328.355435][T10573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.355452][T10573] RSP: 002b:00007fac24a22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.355473][T10573] RAX: ffffffffffffffda RBX: 00007fac23e25fa0 RCX: 00007fac23b9e0d9 [ 328.355486][T10573] RDX: 0000000024044010 RSI: 0000200000000180 RDI: 0000000000000003 [ 328.355499][T10573] RBP: 00007fac24a22090 R08: 0000000000000000 R09: 0000000000000000 [ 328.355510][T10573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.355521][T10573] R13: 00007fac23e26038 R14: 00007fac23e25fa0 R15: 00007ffd5092f2a8 [ 328.355554][T10573] [ 328.639427][ T35] net_ratelimit: 31 callbacks suppressed [ 328.639450][ T35] bond12: (slave batadv0): failed to get link speed/duplex [ 328.655572][T10576] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 328.665798][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.674247][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.713397][T10576] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 328.723229][T10576] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 328.762515][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 328.816478][T10582] __nla_validate_parse: 2 callbacks suppressed [ 328.816497][T10582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1499'. [ 328.894447][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 328.987999][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.014253][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 329.055280][T10598] netlink: 3344 bytes leftover after parsing attributes in process `syz.3.1505'. [ 329.134340][ T35] bond12: (slave batadv0): failed to get link speed/duplex [ 329.254234][ T13] bond12: (slave batadv0): failed to get link speed/duplex [ 329.306572][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.482275][T10615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1511'. [ 329.498719][T10615] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1511'. [ 329.525635][T10615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1511'. [ 329.537897][ T48] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 329.553931][ T48] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 329.572154][T10615] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1511'. [ 329.590503][ T48] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 329.633157][ T48] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 330.201415][T10652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1523'. [ 330.402644][T10658] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 331.045390][T10696] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 331.045390][T10696] Please contact the netfilter-devel mailing list or update your nftables rules. [ 331.369378][T10708] syzkaller0: entered promiscuous mode [ 331.385234][T10708] syzkaller0: entered allmulticast mode [ 331.554487][T10715] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1545'. [ 331.808299][T10725] netlink: 'syz.4.1549': attribute type 10 has an invalid length. [ 332.153577][T10743] x_tables: duplicate underflow at hook 1 [ 332.759731][T10766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1562'. [ 333.062362][T10786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.144308][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 333.617722][T10810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1578'. [ 333.640202][T10806] IPVS: set_ctl: invalid protocol: 58 172.30.1.1:20000 [ 333.726898][ T48] net_ratelimit: 47 callbacks suppressed [ 333.726918][ T48] bond12: (slave batadv0): failed to get link speed/duplex [ 333.844076][T10820] __nla_validate_parse: 2 callbacks suppressed [ 333.851411][T10820] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1582'. [ 333.884227][ T12] bond12: (slave batadv0): failed to get link speed/duplex [ 333.898105][T10818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1581'. [ 333.938212][T10824] syzkaller0: entered promiscuous mode [ 333.973651][T10824] syzkaller0: entered allmulticast mode [ 334.098094][ T449] bond12: (slave batadv0): failed to get link speed/duplex [ 334.114262][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.188546][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.224245][ T449] bond12: (slave batadv0): failed to get link speed/duplex [ 334.345352][ T3368] bond12: (slave batadv0): failed to get link speed/duplex [ 334.353554][T10848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1592'. [ 334.425817][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.434031][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.442649][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.517187][T10849] macsec0: entered promiscuous mode [ 334.524218][T10849] bridge0: entered promiscuous mode [ 334.635258][T10858] IPVS: set_ctl: invalid protocol: 51 10.1.1.3:20001 [ 334.728018][T10865] ip6tnl2: entered allmulticast mode [ 334.735927][ T3368] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 334.751232][ T3368] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 334.764370][ T5727] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 335.104924][T10879] FAULT_INJECTION: forcing a failure. [ 335.104924][T10879] name failslab, interval 1, probability 0, space 0, times 0 [ 335.125209][T10879] CPU: 0 UID: 0 PID: 10879 Comm: syz.0.1604 Not tainted syzkaller #0 PREEMPT(full) [ 335.125236][T10879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 335.125247][T10879] Call Trace: [ 335.125255][T10879] [ 335.125262][T10879] dump_stack_lvl+0xe8/0x150 [ 335.125294][T10879] should_fail_ex+0x40c/0x560 [ 335.125321][T10879] should_failslab+0xa8/0x100 [ 335.125348][T10879] __kmalloc_cache_noprof+0xa8/0x660 [ 335.125373][T10879] ? nfnetlink_rcv+0x1021/0x28c0 [ 335.125394][T10879] ? nfnetlink_rcv+0x1021/0x28c0 [ 335.125422][T10879] nfnetlink_rcv+0x1021/0x28c0 [ 335.125478][T10879] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 335.125517][T10879] ? ref_tracker_free+0x689/0x830 [ 335.125563][T10879] ? skb_clone+0x246/0x3a0 [ 335.125590][T10879] ? __netlink_deliver_tap+0x811/0x860 [ 335.125633][T10879] ? netlink_deliver_tap+0x2e/0x1b0 [ 335.125655][T10879] ? netlink_deliver_tap+0x2e/0x1b0 [ 335.125684][T10879] netlink_unicast+0x7bb/0x940 [ 335.125718][T10879] netlink_sendmsg+0x813/0xb40 [ 335.125752][T10879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.125781][T10879] ? aa_sock_msg_perm+0xf1/0x1b0 [ 335.125805][T10879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.125827][T10879] sock_sendmsg_nosec+0x13a/0x180 [ 335.125857][T10879] ____sys_sendmsg+0x54e/0x850 [ 335.125887][T10879] ? __pfx_____sys_sendmsg+0x10/0x10 [ 335.125920][T10879] ? import_iovec+0x73/0xa0 [ 335.125950][T10879] ___sys_sendmsg+0x2a5/0x360 [ 335.125972][T10879] ? __lock_acquire+0x683/0x2cf0 [ 335.126001][T10879] ? __pfx____sys_sendmsg+0x10/0x10 [ 335.126061][T10879] ? __fget_files+0x2a/0x420 [ 335.126084][T10879] ? __fget_files+0x3a2/0x420 [ 335.126117][T10879] __x64_sys_sendmsg+0x1b1/0x290 [ 335.126142][T10879] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 335.126184][T10879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.126209][T10879] do_syscall_64+0x174/0x580 [ 335.126234][T10879] ? trace_irq_disable+0x3b/0x140 [ 335.126255][T10879] ? clear_bhb_loop+0x70/0xc0 [ 335.126278][T10879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.126297][T10879] RIP: 0033:0x7f36f259e0d9 [ 335.126314][T10879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.126330][T10879] RSP: 002b:00007f36f33ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.126350][T10879] RAX: ffffffffffffffda RBX: 00007f36f2825fa0 RCX: 00007f36f259e0d9 [ 335.126363][T10879] RDX: 0000000024004000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 335.126375][T10879] RBP: 00007f36f33ee090 R08: 0000000000000000 R09: 0000000000000000 [ 335.126386][T10879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 335.126397][T10879] R13: 00007f36f2826038 R14: 00007f36f2825fa0 R15: 00007fff6f72f288 [ 335.126428][T10879] [ 335.544886][ T5727] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 335.563770][T10889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1606'. [ 335.586184][T10889] FAULT_INJECTION: forcing a failure. [ 335.586184][T10889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.642792][T10889] CPU: 1 UID: 0 PID: 10889 Comm: syz.4.1606 Not tainted syzkaller #0 PREEMPT(full) [ 335.642821][T10889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 335.642832][T10889] Call Trace: [ 335.642840][T10889] [ 335.642848][T10889] dump_stack_lvl+0xe8/0x150 [ 335.642882][T10889] should_fail_ex+0x40c/0x560 [ 335.642910][T10889] _copy_from_user+0x2d/0xb0 [ 335.642939][T10889] kstrtouint_from_user+0xd6/0x180 [ 335.642965][T10889] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 335.643007][T10889] proc_fail_nth_write+0x8e/0x210 [ 335.643033][T10889] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 335.643068][T10889] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 335.643092][T10889] vfs_write+0x296/0xba0 [ 335.643130][T10889] ? __pfx_vfs_write+0x10/0x10 [ 335.643158][T10889] ? __fget_files+0x2a/0x420 [ 335.643187][T10889] ? __fget_files+0x3a2/0x420 [ 335.643209][T10889] ? __fget_files+0x2a/0x420 [ 335.643241][T10889] ksys_write+0x150/0x270 [ 335.643271][T10889] ? __pfx_ksys_write+0x10/0x10 [ 335.643307][T10889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.643328][T10889] do_syscall_64+0x174/0x580 [ 335.643354][T10889] ? trace_irq_disable+0x3b/0x140 [ 335.643376][T10889] ? clear_bhb_loop+0x70/0xc0 [ 335.643399][T10889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.643418][T10889] RIP: 0033:0x7fac23b5e90e [ 335.643437][T10889] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 335.643453][T10889] RSP: 002b:00007fac24a00fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 335.643479][T10889] RAX: ffffffffffffffda RBX: 00007fac24a016c0 RCX: 00007fac23b5e90e [ 335.643492][T10889] RDX: 0000000000000001 RSI: 00007fac24a010a0 RDI: 0000000000000009 [ 335.643503][T10889] RBP: 00007fac24a01090 R08: 0000000000000000 R09: 0000000000000000 [ 335.643515][T10889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 335.643526][T10889] R13: 00007fac23e26128 R14: 00007fac23e26090 R15: 00007ffd5092f2a8 [ 335.643560][T10889] [ 335.863819][ T5727] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 336.264613][ T5627] Bluetooth: hci4: command 0x0405 tx timeout [ 336.702508][T10930] 8021q: adding VLAN 0 to HW filter on device bond2 [ 337.556166][T10974] netlink: 'syz.2.1628': attribute type 12 has an invalid length. [ 337.566473][ T29] audit: type=1804 audit(1786996327.190:22): pid=10975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1630" name="/newroot/323/cgroup.controllers" dev="tmpfs" ino=1659 res=1 errno=0 [ 337.632648][ T29] audit: type=1800 audit(1786996327.190:23): pid=10975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1630" name="cgroup.controllers" dev="tmpfs" ino=1659 res=0 errno=0 [ 337.758184][ T29] audit: type=1804 audit(1786996327.190:24): pid=10975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1630" name="/newroot/323/cgroup.controllers" dev="tmpfs" ino=1659 res=1 errno=0 [ 337.968230][T10992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1637'. [ 337.987006][T10993] xt_SECMARK: invalid mode: 9 [ 338.030610][T10995] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1638'. [ 338.176838][T10998] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1639'. [ 338.388438][T11011] FAULT_INJECTION: forcing a failure. [ 338.388438][T11011] name failslab, interval 1, probability 0, space 0, times 0 [ 338.434077][T11011] CPU: 0 UID: 0 PID: 11011 Comm: syz.4.1644 Not tainted syzkaller #0 PREEMPT(full) [ 338.434111][T11011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 338.434123][T11011] Call Trace: [ 338.434131][T11011] [ 338.434139][T11011] dump_stack_lvl+0xe8/0x150 [ 338.434174][T11011] should_fail_ex+0x40c/0x560 [ 338.434204][T11011] should_failslab+0xa8/0x100 [ 338.434233][T11011] __kmalloc_noprof+0xfe/0x720 [ 338.434256][T11011] ? vfs_write+0x22b/0xba0 [ 338.434283][T11011] ? kernfs_fop_write_iter+0x157/0x540 [ 338.434302][T11011] ? kernfs_fop_write_iter+0x157/0x540 [ 338.434330][T11011] kernfs_fop_write_iter+0x157/0x540 [ 338.434358][T11011] vfs_write+0x612/0xba0 [ 338.434396][T11011] ? __pfx_vfs_write+0x10/0x10 [ 338.434436][T11011] ? __fget_files+0x2a/0x420 [ 338.434471][T11011] ksys_write+0x150/0x270 [ 338.434502][T11011] ? __pfx_ksys_write+0x10/0x10 [ 338.434539][T11011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.434561][T11011] do_syscall_64+0x174/0x580 [ 338.434587][T11011] ? trace_irq_disable+0x3b/0x140 [ 338.434611][T11011] ? clear_bhb_loop+0x70/0xc0 [ 338.434644][T11011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.434663][T11011] RIP: 0033:0x7fac23b9e0d9 [ 338.434682][T11011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.434698][T11011] RSP: 002b:00007fac24a22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 338.434720][T11011] RAX: ffffffffffffffda RBX: 00007fac23e25fa0 RCX: 00007fac23b9e0d9 [ 338.434734][T11011] RDX: 0000000000000009 RSI: 0000200000000280 RDI: 0000000000000005 [ 338.434747][T11011] RBP: 00007fac24a22090 R08: 0000000000000000 R09: 0000000000000000 [ 338.434758][T11011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.434770][T11011] R13: 00007fac23e26038 R14: 00007fac23e25fa0 R15: 00007ffd5092f2a8 [ 338.434804][T11011] [ 338.505509][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 338.724018][T11019] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1646'. [ 338.751913][ T48] net_ratelimit: 40 callbacks suppressed [ 338.751935][ T48] bond12: (slave batadv0): failed to get link speed/duplex [ 338.884081][T11021] netlink: 3344 bytes leftover after parsing attributes in process `syz.4.1647'. [ 338.899331][ T35] bond12: (slave batadv0): failed to get link speed/duplex [ 338.932145][T11026] netlink: 'syz.1.1649': attribute type 12 has an invalid length. [ 339.002555][T11024] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1648'. [ 339.027007][ T35] bond12: (slave batadv0): failed to get link speed/duplex [ 339.061872][T11024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1648'. [ 339.086772][T11026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.119089][T11024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1648'. [ 339.174228][ T48] bond12: (slave batadv0): failed to get link speed/duplex [ 339.281090][T11004] IPVS: nq: TCP 172.20.20.170:0 - no destination available [ 339.284863][ T35] bond12: (slave batadv0): failed to get link speed/duplex [ 339.424221][ T3368] bond12: (slave batadv0): failed to get link speed/duplex [ 339.439490][T11048] netlink: 'syz.4.1653': attribute type 1 has an invalid length. [ 339.546134][ T3368] bond12: (slave batadv0): failed to get link speed/duplex [ 339.705766][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.016592][T11068] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1659'. [ 340.097010][T11072] netlink: 3344 bytes leftover after parsing attributes in process `syz.3.1660'. [ 340.933200][T11109] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1674'. [ 340.937183][T11110] netlink: 3344 bytes leftover after parsing attributes in process `syz.1.1675'. [ 341.143336][T11120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1676'. [ 342.121589][T11164] x_tables: duplicate underflow at hook 4 [ 342.490488][T11190] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1703'. [ 342.784412][T11205] syzkaller0: entered promiscuous mode [ 342.790078][T11205] syzkaller0: entered allmulticast mode [ 343.794202][ T1053] net_ratelimit: 54 callbacks suppressed [ 343.794224][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 343.842176][T11219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.865882][T11219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.885726][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.920450][T11233] __nla_validate_parse: 1 callbacks suppressed [ 343.920470][T11233] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1720'. [ 343.944754][ T3368] bond12: (slave batadv0): failed to get link speed/duplex [ 344.042569][T11237] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1721'. [ 344.066438][ T35] bond12: (slave batadv0): failed to get link speed/duplex [ 344.264361][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.296100][ T12] bond12: (slave batadv0): failed to get link speed/duplex [ 344.344373][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.444379][ T13] bond12: (slave batadv0): failed to get link speed/duplex [ 344.463981][ T9500] udevd[9500]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 344.573598][T11249] xt_TPROXY: Can be used only with -p tcp or -p udp [ 344.589441][T11253] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1728'. [ 344.591475][T11249] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1726'. [ 344.605966][T11254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1727'. [ 344.674320][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 345.194892][T11285] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1740'. [ 345.376188][T11290] FAULT_INJECTION: forcing a failure. [ 345.376188][T11290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.419676][T11290] CPU: 1 UID: 0 PID: 11290 Comm: syz.3.1741 Not tainted syzkaller #0 PREEMPT(full) [ 345.419706][T11290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 345.419717][T11290] Call Trace: [ 345.419725][T11290] [ 345.419734][T11290] dump_stack_lvl+0xe8/0x150 [ 345.419853][T11290] should_fail_ex+0x40c/0x560 [ 345.419973][T11290] _copy_from_user+0x2d/0xb0 [ 345.420083][T11290] ___sys_sendmsg+0x1c6/0x360 [ 345.420194][T11290] ? __lock_acquire+0x683/0x2cf0 [ 345.420253][T11290] ? __pfx____sys_sendmsg+0x10/0x10 [ 345.420313][T11290] ? __fget_files+0x2a/0x420 [ 345.420366][T11290] ? __fget_files+0x3a2/0x420 [ 345.420401][T11290] __x64_sys_sendmsg+0x1b1/0x290 [ 345.420428][T11290] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 345.420470][T11290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.420521][T11290] do_syscall_64+0x174/0x580 [ 345.420631][T11290] ? trace_irq_disable+0x3b/0x140 [ 345.420677][T11290] ? clear_bhb_loop+0x70/0xc0 [ 345.420700][T11290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.420720][T11290] RIP: 0033:0x7fbe8f59e0d9 [ 345.420738][T11290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.420754][T11290] RSP: 002b:00007fbe8d7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.420775][T11290] RAX: ffffffffffffffda RBX: 00007fbe8f825fa0 RCX: 00007fbe8f59e0d9 [ 345.420788][T11290] RDX: 0000000004000000 RSI: 0000200000000180 RDI: 0000000000000009 [ 345.420800][T11290] RBP: 00007fbe8d7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 345.420812][T11290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.420824][T11290] R13: 00007fbe8f826038 R14: 00007fbe8f825fa0 R15: 00007ffe5967dc08 [ 345.420880][T11290] [ 345.697738][T11295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1743'. [ 345.944413][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 346.176226][T11321] set match dimension is over the limit! [ 346.244938][T11321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1751'. [ 346.269766][T11324] xt_SECMARK: invalid mode: 9 [ 346.465836][T11334] netlink: 'syz.3.1758': attribute type 12 has an invalid length. [ 346.480431][T11334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1758'. [ 346.818751][T11318] netlink: 'syz.2.1746': attribute type 1 has an invalid length. [ 346.850936][T11318] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1746'. [ 347.630908][T11380] netlink: 'syz.4.1772': attribute type 24 has an invalid length. [ 347.928334][T11397] netlink: 'syz.2.1776': attribute type 12 has an invalid length. [ 348.865446][ T12] net_ratelimit: 47 callbacks suppressed [ 348.865469][ T12] bond12: (slave batadv0): failed to get link speed/duplex [ 349.084487][ T5805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.124285][ T12] bond12: (slave batadv0): failed to get link speed/duplex [ 349.265671][T11429] bond12: (slave batadv0): failed to get link speed/duplex [ 349.365661][T11454] syzkaller0: entered promiscuous mode [ 349.378515][T11454] syzkaller0: entered allmulticast mode [ 349.532764][T11463] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 349.544419][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.614579][ T66] bond12: (slave batadv0): failed to get link speed/duplex [ 349.754360][T11429] bond12: (slave batadv0): failed to get link speed/duplex [ 349.821106][T11476] netlink: 'syz.4.1794': attribute type 12 has an invalid length. [ 349.854816][T11476] __nla_validate_parse: 2 callbacks suppressed [ 349.854836][T11476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1794'. [ 349.884500][ T66] bond12: (slave batadv0): failed to get link speed/duplex [ 350.064460][ T48] bond12: (slave batadv0): failed to get link speed/duplex [ 350.348608][T11497] syzkaller0: entered promiscuous mode [ 350.363864][T11497] syzkaller0: entered allmulticast mode [ 350.641197][T11504] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1803'. [ 350.691161][T11504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1803'. [ 350.776791][T11509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1804'. [ 351.064356][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 351.417925][T11537] syzkaller0: entered promiscuous mode [ 351.423736][T11537] syzkaller0: entered allmulticast mode [ 351.502142][T11540] netlink: 'syz.0.1813': attribute type 12 has an invalid length. [ 351.538586][T11543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1813'. [ 351.854755][T11564] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 351.952272][T11567] xt_hashlimit: size too large, truncated to 1048576 [ 352.463653][T11582] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1823'. [ 352.624407][T11579] ip6tnl2: entered allmulticast mode [ 353.256734][T11608] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1828'. [ 353.320975][T11606] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1827'. [ 353.386025][ T12] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 353.412138][ T12] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 353.422673][ T9] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 353.611644][T11639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.680682][T11639] FAULT_INJECTION: forcing a failure. [ 353.680682][T11639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.735119][T11639] CPU: 1 UID: 0 PID: 11639 Comm: syz.3.1831 Not tainted syzkaller #0 PREEMPT(full) [ 353.735149][T11639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 353.735160][T11639] Call Trace: [ 353.735168][T11639] [ 353.735176][T11639] dump_stack_lvl+0xe8/0x150 [ 353.735211][T11639] should_fail_ex+0x40c/0x560 [ 353.735240][T11639] _copy_from_iter+0x1d3/0x1660 [ 353.735338][T11639] ? kmem_cache_alloc_node_noprof+0x101/0x610 [ 353.735387][T11639] ? rcu_is_watching+0x15/0xb0 [ 353.735421][T11639] ? trace_kmem_cache_alloc+0x29/0xe0 [ 353.735446][T11639] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 353.735467][T11639] ? __pfx__copy_from_iter+0x10/0x10 [ 353.735491][T11639] ? __alloc_skb+0x276/0x7a0 [ 353.735544][T11639] ? __alloc_skb+0x276/0x7a0 [ 353.735572][T11639] ? netlink_sendmsg+0x650/0xb40 [ 353.735664][T11639] ? skb_put+0x112/0x210 [ 353.735690][T11639] netlink_sendmsg+0x6c0/0xb40 [ 353.735726][T11639] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.735756][T11639] ? aa_sock_msg_perm+0xf1/0x1b0 [ 353.735825][T11639] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.735849][T11639] sock_sendmsg_nosec+0x13a/0x180 [ 353.735881][T11639] ____sys_sendmsg+0x54e/0x850 [ 353.735911][T11639] ? __pfx_____sys_sendmsg+0x10/0x10 [ 353.735946][T11639] ? import_iovec+0x73/0xa0 [ 353.735977][T11639] ___sys_sendmsg+0x2a5/0x360 [ 353.736000][T11639] ? __lock_acquire+0x683/0x2cf0 [ 353.736028][T11639] ? __pfx____sys_sendmsg+0x10/0x10 [ 353.736090][T11639] ? __fget_files+0x2a/0x420 [ 353.736111][T11639] ? __fget_files+0x3a2/0x420 [ 353.736146][T11639] __x64_sys_sendmsg+0x1b1/0x290 [ 353.736172][T11639] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 353.736215][T11639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.736235][T11639] do_syscall_64+0x174/0x580 [ 353.736261][T11639] ? trace_irq_disable+0x3b/0x140 [ 353.736285][T11639] ? clear_bhb_loop+0x70/0xc0 [ 353.736307][T11639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.736326][T11639] RIP: 0033:0x7fbe8f59e0d9 [ 353.736344][T11639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.736360][T11639] RSP: 002b:00007fbe8d7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.736381][T11639] RAX: ffffffffffffffda RBX: 00007fbe8f825fa0 RCX: 00007fbe8f59e0d9 [ 353.736395][T11639] RDX: 0000000000010080 RSI: 00002000000001c0 RDI: 0000000000000008 [ 353.736407][T11639] RBP: 00007fbe8d7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 353.736418][T11639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.736429][T11639] R13: 00007fbe8f826038 R14: 00007fbe8f825fa0 R15: 00007ffe5967dc08 [ 353.736460][T11639] [ 354.023315][ T1053] net_ratelimit: 26 callbacks suppressed [ 354.023336][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 354.144492][ T66] bond12: (slave batadv0): failed to get link speed/duplex [ 354.184414][ T5342] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 354.260463][T11650] FAULT_INJECTION: forcing a failure. [ 354.260463][T11650] name failslab, interval 1, probability 0, space 0, times 0 [ 354.269481][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.284676][ T66] bond12: (slave batadv0): failed to get link speed/duplex [ 354.320065][T11650] CPU: 1 UID: 0 PID: 11650 Comm: syz.0.1833 Not tainted syzkaller #0 PREEMPT(full) [ 354.320091][T11650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 354.320103][T11650] Call Trace: [ 354.320111][T11650] [ 354.320119][T11650] dump_stack_lvl+0xe8/0x150 [ 354.320152][T11650] should_fail_ex+0x40c/0x560 [ 354.320180][T11650] should_failslab+0xa8/0x100 [ 354.320223][T11650] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 354.320246][T11650] ? dst_alloc+0x105/0x170 [ 354.320329][T11650] ? dst_alloc+0x105/0x170 [ 354.320361][T11650] dst_alloc+0x105/0x170 [ 354.320391][T11650] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 354.320490][T11650] ? ip_route_output_key_hash+0xd8/0x2a0 [ 354.320517][T11650] ip_route_output_key_hash+0x18d/0x2a0 [ 354.320553][T11650] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 354.320595][T11650] ip_route_output_flow+0x2a/0x150 [ 354.320617][T11650] ? security_sk_classify_flow+0x6d/0x150 [ 354.320672][T11650] udp_sendmsg+0x144a/0x2140 [ 354.320756][T11650] ? __lock_acquire+0x683/0x2cf0 [ 354.320782][T11650] ? __pfx_udp_sendmsg+0x10/0x10 [ 354.320816][T11650] ? ip4_datagram_release_cb+0x976/0xbe0 [ 354.320846][T11650] ? reacquire_held_locks+0x104/0x190 [ 354.320881][T11650] ? inet_sendmsg+0x10d/0x320 [ 354.320933][T11650] ? inet_sendmsg+0x10d/0x320 [ 354.320957][T11650] ? __local_bh_enable_ip+0xd0/0x130 [ 354.320996][T11650] ? lockdep_hardirqs_on+0x7a/0x110 [ 354.321022][T11650] ? inet_sendmsg+0x10d/0x320 [ 354.321051][T11650] ? inet_sendmsg+0x23e/0x320 [ 354.321077][T11650] ? __pfx_inet_sendmsg+0x10/0x10 [ 354.321101][T11650] sock_sendmsg_nosec+0x10e/0x180 [ 354.321133][T11650] __sys_sendto+0x408/0x5a0 [ 354.321154][T11650] ? ksys_write+0x1e6/0x270 [ 354.321193][T11650] ? __pfx___sys_sendto+0x10/0x10 [ 354.321212][T11650] ? __mutex_unlock_slowpath+0x731/0x900 [ 354.321294][T11650] ? __pfx_ksys_write+0x10/0x10 [ 354.321324][T11650] __x64_sys_sendto+0xde/0x100 [ 354.321346][T11650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.321367][T11650] do_syscall_64+0x174/0x580 [ 354.321392][T11650] ? trace_irq_disable+0x3b/0x140 [ 354.321414][T11650] ? clear_bhb_loop+0x70/0xc0 [ 354.321438][T11650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.321456][T11650] RIP: 0033:0x7f36f259e0d9 [ 354.321475][T11650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.321491][T11650] RSP: 002b:00007f36f33ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 354.321513][T11650] RAX: ffffffffffffffda RBX: 00007f36f2825fa0 RCX: 00007f36f259e0d9 [ 354.321535][T11650] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 354.321546][T11650] RBP: 00007f36f33ee090 R08: 0000200000000900 R09: 0000000000000010 [ 354.321558][T11650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.321569][T11650] R13: 00007f36f2826038 R14: 00007f36f2825fa0 R15: 00007fff6f72f288 [ 354.321600][T11650] [ 354.628059][ T5342] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 354.865461][ T12] bond12: (slave batadv0): failed to get link speed/duplex [ 354.905499][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.068536][T11680] bond0: option arp_validate: invalid value (55553) [ 355.304806][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.450317][T11680] bond0 (unregistering): Released all slaves [ 355.615897][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 355.738594][ T48] bond12: (slave batadv0): failed to get link speed/duplex [ 355.884279][ T48] bond12: (slave batadv0): failed to get link speed/duplex [ 357.384811][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 359.024349][T11429] net_ratelimit: 36 callbacks suppressed [ 359.024372][T11429] bond12: (slave batadv0): failed to get link speed/duplex [ 359.064214][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.154415][ T66] bond12: (slave batadv0): failed to get link speed/duplex [ 359.264531][T11429] bond12: (slave batadv0): failed to get link speed/duplex [ 359.384279][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 359.475967][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.494245][ T66] bond12: (slave batadv0): failed to get link speed/duplex [ 359.604261][ T66] bond12: (slave batadv0): failed to get link speed/duplex [ 359.714428][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 359.824273][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 361.304510][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 364.114261][ T12] net_ratelimit: 48 callbacks suppressed [ 364.114284][ T12] bond12: (slave batadv0): failed to get link speed/duplex [ 364.244211][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 364.364234][ T66] bond12: (slave batadv0): failed to get link speed/duplex [ 364.484288][T11429] bond12: (slave batadv0): failed to get link speed/duplex [ 364.594328][T11429] bond12: (slave batadv0): failed to get link speed/duplex [ 364.674726][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.714199][T11429] bond12: (slave batadv0): failed to get link speed/duplex [ 364.834279][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 364.954295][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 365.064956][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 365.784416][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 369.204335][ T12] net_ratelimit: 47 callbacks suppressed [ 369.204359][ T12] bond12: (slave batadv0): failed to get link speed/duplex [ 369.324253][T11429] bond12: (slave batadv0): failed to get link speed/duplex [ 369.434274][T11429] bond12: (slave batadv0): failed to get link speed/duplex [ 369.544433][ T48] bond12: (slave batadv0): failed to get link speed/duplex [ 369.654287][T11429] bond12: (slave batadv0): failed to get link speed/duplex [ 369.764230][T11429] bond12: (slave batadv0): failed to get link speed/duplex [ 369.794189][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.875046][ T12] bond12: (slave batadv0): failed to get link speed/duplex [ 369.882437][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.994361][ T48] bond12: (slave batadv0): failed to get link speed/duplex [ 374.254274][ T48] net_ratelimit: 48 callbacks suppressed [ 374.254297][ T48] bond12: (slave batadv0): failed to get link speed/duplex [ 374.374265][ T12] bond12: (slave batadv0): failed to get link speed/duplex [ 374.484400][ T48] bond12: (slave batadv0): failed to get link speed/duplex [ 374.594597][ T48] bond12: (slave batadv0): failed to get link speed/duplex [ 374.714220][ T12] bond12: (slave batadv0): failed to get link speed/duplex [ 374.824349][ T12] bond12: (slave batadv0): failed to get link speed/duplex [ 374.944217][ T48] bond12: (slave batadv0): failed to get link speed/duplex [ 374.994387][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.064401][ T48] bond12: (slave batadv0): failed to get link speed/duplex [ 375.064505][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.586493][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.264293][T11429] net_ratelimit: 47 callbacks suppressed [ 379.264317][T11429] bond12: (slave batadv0): failed to get link speed/duplex [ 379.384263][ T12] bond12: (slave batadv0): failed to get link speed/duplex [ 379.494271][T11429] bond12: (slave batadv0): failed to get link speed/duplex [ 379.604260][T11429] bond12: (slave batadv0): failed to get link speed/duplex [ 379.714267][ T66] bond12: (slave batadv0): failed to get link speed/duplex [ 379.824216][ T66] bond12: (slave batadv0): failed to get link speed/duplex [ 379.934240][T11429] bond12: (slave batadv0): failed to get link speed/duplex [ 380.044249][ T66] bond12: (slave batadv0): failed to get link speed/duplex [ 380.154219][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 380.184206][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.424353][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 384.344708][ C1] net_ratelimit: 44 callbacks suppressed [ 384.344724][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.359152][ T12] bond12: (slave batadv0): failed to get link speed/duplex [ 384.425737][ T5805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.474214][ T66] bond12: (slave batadv0): failed to get link speed/duplex [ 384.584226][ T66] bond12: (slave batadv0): failed to get link speed/duplex [ 384.694256][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 384.804366][ T66] bond12: (slave batadv0): failed to get link speed/duplex [ 384.914240][ T12] bond12: (slave batadv0): failed to get link speed/duplex [ 384.984691][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.992822][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.914302][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 389.384389][ T1053] net_ratelimit: 48 callbacks suppressed [ 389.384412][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 389.505447][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 389.554199][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.614370][ T12] bond12: (slave batadv0): failed to get link speed/duplex [ 389.634721][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.724303][T11429] bond12: (slave batadv0): failed to get link speed/duplex [ 389.834350][T11429] bond12: (slave batadv0): failed to get link speed/duplex [ 389.946373][ T66] bond12: (slave batadv0): failed to get link speed/duplex [ 390.054709][ T48] bond12: (slave batadv0): failed to get link speed/duplex [ 390.104641][ T66] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.744554][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 394.464346][T11429] net_ratelimit: 49 callbacks suppressed [ 394.464370][T11429] bond12: (slave batadv0): failed to get link speed/duplex [ 394.585846][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 394.694315][ T66] bond12: (slave batadv0): failed to get link speed/duplex [ 394.744199][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.805275][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 394.826408][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.914247][ T66] bond12: (slave batadv0): failed to get link speed/duplex [ 395.025585][ T12] bond12: (slave batadv0): failed to get link speed/duplex [ 395.134898][T11429] bond12: (slave batadv0): failed to get link speed/duplex [ 395.224694][T11429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.524465][ T12] net_ratelimit: 47 callbacks suppressed [ 399.524488][ T12] bond12: (slave batadv0): failed to get link speed/duplex [ 399.644266][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 399.754203][ T12] bond12: (slave batadv0): failed to get link speed/duplex [ 399.864381][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.872808][ T12] bond12: (slave batadv0): failed to get link speed/duplex [ 399.984245][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 400.034618][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.094261][T11429] bond12: (slave batadv0): failed to get link speed/duplex [ 400.204252][ T12] bond12: (slave batadv0): failed to get link speed/duplex [ 400.314212][ T48] bond12: (slave batadv0): failed to get link speed/duplex [ 404.184333][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 404.544238][T11429] net_ratelimit: 47 callbacks suppressed [ 404.544261][T11429] bond12: (slave batadv0): failed to get link speed/duplex [ 404.664797][T11429] bond12: (slave batadv0): failed to get link speed/duplex [ 404.774324][ T48] bond12: (slave batadv0): failed to get link speed/duplex [ 404.884245][ T13] bond12: (slave batadv0): failed to get link speed/duplex [ 404.994347][T11429] bond12: (slave batadv0): failed to get link speed/duplex [ 405.074201][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.114227][ T13] bond12: (slave batadv0): failed to get link speed/duplex [ 405.224479][ T48] bond12: (slave batadv0): failed to get link speed/duplex [ 405.235978][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.334234][ T13] bond12: (slave batadv0): failed to get link speed/duplex [ 409.554365][ T48] net_ratelimit: 47 callbacks suppressed [ 409.554388][ T48] bond12: (slave batadv0): failed to get link speed/duplex [ 409.674199][ T13] bond12: (slave batadv0): failed to get link speed/duplex [ 409.794246][ T48] bond12: (slave batadv0): failed to get link speed/duplex [ 409.904237][T11429] bond12: (slave batadv0): failed to get link speed/duplex [ 410.014219][ T13] bond12: (slave batadv0): failed to get link speed/duplex [ 410.134279][ T48] bond12: (slave batadv0): failed to get link speed/duplex [ 410.244233][T11429] bond12: (slave batadv0): failed to get link speed/duplex [ 410.264376][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.354227][ T13] bond12: (slave batadv0): failed to get link speed/duplex [ 410.424587][ T5805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.424747][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 414.595260][ T5727] net_ratelimit: 46 callbacks suppressed [ 414.595282][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.609632][ T48] bond12: (slave batadv0): failed to get link speed/duplex [ 414.724223][ T48] bond12: (slave batadv0): failed to get link speed/duplex [ 414.834266][T11429] bond12: (slave batadv0): failed to get link speed/duplex [ 414.954249][T11429] bond12: (slave batadv0): failed to get link speed/duplex [ 415.065016][ T48] bond12: (slave batadv0): failed to get link speed/duplex [ 415.174229][ T48] bond12: (slave batadv0): failed to get link speed/duplex [ 415.294225][ T66] bond12: (slave batadv0): failed to get link speed/duplex [ 415.404287][T11429] bond12: (slave batadv0): failed to get link speed/duplex [ 415.464253][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.634182][ C1] net_ratelimit: 47 callbacks suppressed [ 419.634200][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.684346][ T66] bond12: (slave batadv0): failed to get link speed/duplex [ 419.784772][ T5805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.794204][ T13] bond12: (slave batadv0): failed to get link speed/duplex [ 419.904172][ T13] bond12: (slave batadv0): failed to get link speed/duplex [ 420.024193][ T13] bond12: (slave batadv0): failed to get link speed/duplex [ 420.134192][ T13] bond12: (slave batadv0): failed to get link speed/duplex [ 420.254238][ T13] bond12: (slave batadv0): failed to get link speed/duplex [ 420.374161][ T12] bond12: (slave batadv0): failed to get link speed/duplex [ 420.494197][ T66] bond12: (slave batadv0): failed to get link speed/duplex [ 424.684339][ T12] net_ratelimit: 50 callbacks suppressed [ 424.684361][ T12] bond12: (slave batadv0): failed to get link speed/duplex [ 424.804312][T11429] bond12: (slave batadv0): failed to get link speed/duplex [ 424.824366][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.914224][ T66] bond12: (slave batadv0): failed to get link speed/duplex [ 424.985690][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.024192][ T66] bond12: (slave batadv0): failed to get link speed/duplex [ 425.134193][ T66] bond12: (slave batadv0): failed to get link speed/duplex [ 425.244235][ T13] bond12: (slave batadv0): failed to get link speed/duplex [ 425.354212][ T66] bond12: (slave batadv0): failed to get link speed/duplex [ 425.474432][ T66] bond12: (slave batadv0): failed to get link speed/duplex [ 429.734257][ T12] net_ratelimit: 48 callbacks suppressed [ 429.734279][ T12] bond12: (slave batadv0): failed to get link speed/duplex [ 429.854282][T11429] bond12: (slave batadv0): failed to get link speed/duplex [ 429.964206][T11429] bond12: (slave batadv0): failed to get link speed/duplex [ 430.084184][T11429] bond12: (slave batadv0): failed to get link speed/duplex [ 430.195729][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.195794][ T13] bond12: (slave batadv0): failed to get link speed/duplex [ 430.314277][ T13] bond12: (slave batadv0): failed to get link speed/duplex [ 430.344512][T11429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.424217][ T66] bond12: (slave batadv0): failed to get link speed/duplex [ 430.544302][ T66] bond12: (slave batadv0): failed to get link speed/duplex [ 434.794804][T11429] net_ratelimit: 48 callbacks suppressed [ 434.794828][T11429] bond12: (slave batadv0): failed to get link speed/duplex [ 434.914666][T11429] bond12: (slave batadv0): failed to get link speed/duplex [ 435.034305][ T13] bond12: (slave batadv0): failed to get link speed/duplex [ 435.154303][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 435.264213][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 435.374233][ T13] bond12: (slave batadv0): failed to get link speed/duplex [ 435.385717][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.494232][T11429] bond12: (slave batadv0): failed to get link speed/duplex [ 435.544280][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.614217][ T1053] bond12: (slave batadv0): failed to get link speed/duplex [ 439.874302][ T48] net_ratelimit: 47 callbacks suppressed [ 439.874326][ T48] bond12: (slave batadv0): failed to get link speed/duplex [ 439.994196][ T48] bond12: (slave batadv0): failed to get link speed/duplex [ 440.025969][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.027733][T11429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.104306][ T48] bond12: (slave batadv0): failed to get link speed/duplex [ 440.224186][ T13] bond12: (slave batadv0): failed to get link speed/duplex [ 440.334208][ T48] bond12: (slave batadv0): failed to get link speed/duplex [ 440.444271][ T48] bond12: (slave batadv0): failed to get link speed/duplex [ 440.564819][T11429] bond12: (slave batadv0): failed to get link speed/duplex [ 440.594567][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.674311][ T66] bond12: (slave batadv0): failed to get link speed/duplex [ 444.914240][ C1] net_ratelimit: 45 callbacks suppressed [ 444.914256][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.930065][ T66] bond12: (slave batadv0): failed to get link speed/duplex [ 445.044203][ T48] bond12: (slave batadv0): failed to get link speed/duplex [ 445.075530][ T66] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.147193][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.155751][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.157841][ T66] bond12: (slave batadv0): failed to get link speed/duplex [ 445.274420][ T66] bond12: (slave batadv0): failed to get link speed/duplex [ 445.384231][ T48] bond12: (slave batadv0): failed to get link speed/duplex [ 445.494234][ T48] bond12: (slave batadv0): failed to get link speed/duplex [ 449.954882][ T5727] net_ratelimit: 46 callbacks suppressed [ 449.954905][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.984312][T11429] bond12: (slave batadv0): failed to get link speed/duplex [ 450.104227][ T66] bond12: (slave batadv0): failed to get link speed/duplex [ 450.194286][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.214287][T11429] bond12: (slave batadv0): failed to get link speed/duplex [ 450.274284][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 450.282794][T11429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.324271][T11429] bond12: (slave batadv0): failed to get link speed/duplex [ 450.434440][T11429] bond12: (slave batadv0): failed to get link speed/duplex [ 450.544487][T11429] bond12: (slave batadv0): failed to get link speed/duplex [ 450.654809][T11429] bond12: (slave batadv0): failed to get link speed/duplex [ 453.224310][T11756] syzkaller0: entered promiscuous mode [ 453.229944][T11756] syzkaller0: entered allmulticast mode [ 453.293110][T11756] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1847'. [ 456.455378][ C1] net_ratelimit: 42 callbacks suppressed [ 456.455402][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.472816][ T5805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.484881][ T66] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.540577][ T1053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.548890][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.049915][ T66] bond12: (slave batadv0): failed to get link speed/duplex [ 472.024302][ C0] bridge0: port 4(veth1) neighbor 8000.aa:aa:aa:aa:aa:0c lost [ 472.024616][ C0] bridge0: port 4(veth1) entered listening state [ 473.874098][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 475.874086][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 477.874090][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 479.874098][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 480.984268][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 481.874094][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 483.874084][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 485.874086][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 487.384234][ C0] bridge0: port 4(veth1) entered learning state [ 487.874080][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 489.874081][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 491.874085][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 493.874104][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 495.874072][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 497.874081][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 499.874072][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 501.874067][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 502.744149][ C0] bridge0: port 4(veth1) entered forwarding state [ 502.744175][ C0] bridge0: topology change detected, propagating [ 503.874093][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 505.874074][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 507.874064][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 562.114026][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 562.114051][ C0] rcu: 1-...!: (1 GPs behind) idle=ca54/1/0x4000000000000000 softirq=41813/41814 fqs=1 [ 562.114541][ C0] rcu: (detected by 0, t=10502 jiffies, g=50409, q=927 ncpus=2) [ 562.114561][ C0] Sending NMI from CPU 0 to CPUs 1: [ 562.114590][ C1] NMI backtrace for cpu 1 [ 562.114605][ C1] CPU: 1 UID: 0 PID: 1053 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 562.114623][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 562.114633][ C1] Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker [ 562.114762][ C1] RIP: 0010:lock_acquire+0xf6/0x350 [ 562.114786][ C1] Code: 0a 65 ff 05 ec cd ca 11 45 31 c9 4c 89 7c 24 08 41 f7 c7 00 02 00 00 41 0f 94 c1 4c 89 ef 89 de 8b 54 24 04 44 89 e1 45 89 f0 <6a> 00 6a 00 6a 00 55 ff 74 24 30 e8 da 02 00 00 48 83 c4 28 48 c7 [ 562.114799][ C1] RSP: 0018:ffffc90000a07878 EFLAGS: 00000046 [ 562.114812][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000002 [ 562.114821][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8eb59c60 [ 562.114831][ C1] RBP: ffffffff89dca4d8 R08: 0000000000000000 R09: 0000000000000001 [ 562.114841][ C1] R10: dffffc0000000000 R11: ffffed100243a856 R12: 0000000000000002 [ 562.114851][ C1] R13: ffffffff8eb59c60 R14: 0000000000000000 R15: 0000000000000046 [ 562.114862][ C1] FS: 0000000000000000(0000) GS:ffff88812504c000(0000) knlGS:0000000000000000 [ 562.114874][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 562.114884][ C1] CR2: 00007f8811e00218 CR3: 000000000e946000 CR4: 00000000003526f0 [ 562.114900][ C1] Call Trace: [ 562.114906][ C1] [ 562.114917][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 562.114933][ C1] ? advance_sched+0x9e8/0xc80 [ 562.115007][ C1] advance_sched+0xa04/0xc80 [ 562.115027][ C1] ? advance_sched+0x9e8/0xc80 [ 562.115050][ C1] ? __pfx_advance_sched+0x10/0x10 [ 562.115070][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 562.115098][ C1] hrtimer_interrupt+0x448/0x910 [ 562.115121][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 562.115156][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 562.115179][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 562.115198][ C1] RIP: 0010:console_flush_all+0x7d2/0xaf0 [ 562.115215][ C1] Code: ff ff e8 21 2a 21 00 90 0f 0b 90 e9 9c fc ff ff e8 13 2a 21 00 e8 2e ce 2d 0a 48 85 db 74 c0 e8 04 2a 21 00 fb 48 8b 5c 24 18 <48> 8b 44 24 28 42 80 3c 20 00 4d 8d 77 58 74 08 4c 89 f7 e8 06 c6 [ 562.115228][ C1] RSP: 0018:ffffc90000a07cc0 EFLAGS: 00000246 [ 562.115241][ C1] RAX: ffffffff81a5d75c RBX: ffffc90000a07e20 RCX: ffff888028910000 [ 562.115253][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 562.115263][ C1] RBP: ffffc90000a07dd0 R08: ffffffff90576c37 R09: 1ffffffff20aed86 [ 562.115274][ C1] R10: dffffc0000000000 R11: fffffbfff20aed87 R12: dffffc0000000000 [ 562.115286][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff8f46f4e0 [ 562.115299][ C1] ? console_flush_all+0x7cc/0xaf0 [ 562.115319][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 562.115341][ C1] ? console_flush_all+0x123/0xaf0 [ 562.115358][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 562.115376][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 562.115394][ C1] console_unlock+0xd1/0x1c0 [ 562.115417][ C1] ? __pfx_console_unlock+0x10/0x10 [ 562.115439][ C1] ? _printk+0xdd/0x130 [ 562.115476][ C1] vprintk_emit+0x485/0x560 [ 562.115498][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 562.115517][ C1] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 562.115541][ C1] _printk+0xdd/0x130 [ 562.115558][ C1] ? __pfx__printk+0x10/0x10 [ 562.115571][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 562.115610][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 562.115631][ C1] gred_dequeue+0x498/0x670 [ 562.115674][ C1] __qdisc_run+0x24c/0x1620 [ 562.115712][ C1] ? gred_enqueue+0x1003/0x25a0 [ 562.115735][ C1] __dev_queue_xmit+0x1c05/0x3820 [ 562.115797][ C1] ? __dev_queue_xmit+0x29b/0x3820 [ 562.115821][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 562.115841][ C1] ? lock_acquire+0x106/0x350 [ 562.115860][ C1] ? ip6_output+0x337/0x540 [ 562.115943][ C1] ? ip6_output+0x11e/0x540 [ 562.115964][ C1] ip6_output+0x337/0x540 [ 562.115984][ C1] ? ip6_send_skb+0x10a/0x380 [ 562.115999][ C1] ip6_send_skb+0x1cd/0x380 [ 562.116015][ C1] icmp6_send+0x1459/0x1b50 [ 562.116067][ C1] ? icmp6_send+0x23d/0x1b50 [ 562.116090][ C1] ? __pfx_icmp6_send+0x10/0x10 [ 562.116116][ C1] ? raw6_local_deliver+0xfa/0x8e0 [ 562.116133][ C1] ? xfrm6_policy_check+0x569/0x820 [ 562.116154][ C1] ? udp_lib_checksum_complete+0x157/0x210 [ 562.116176][ C1] udpv6_rcv+0x123b/0x1d50 [ 562.116201][ C1] ? __pfx_udpv6_rcv+0x10/0x10 [ 562.116220][ C1] ip6_protocol_deliver_rcu+0xd6e/0x1680 [ 562.116247][ C1] ip6_input_finish+0x191/0x370 [ 562.116265][ C1] NF_HOOK+0x336/0x3c0 [ 562.116281][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 562.116297][ C1] ? NF_HOOK+0x9e/0x3c0 [ 562.116312][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 562.116328][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 562.116348][ C1] ip6_input+0x16a/0x270 [ 562.116363][ C1] ? ip6_input+0x23/0x270 [ 562.116379][ C1] NF_HOOK+0x336/0x3c0 [ 562.116395][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 562.116410][ C1] ? NF_HOOK+0x9e/0x3c0 [ 562.116424][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 562.116446][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 562.116466][ C1] process_backlog+0x774/0x1860 [ 562.116484][ C1] ? process_backlog+0x3c3/0x1860 [ 562.116504][ C1] __napi_poll+0xaa/0x330 [ 562.116520][ C1] net_rx_action+0x61d/0xf50 [ 562.116540][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 562.116554][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 562.116577][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 562.116601][ C1] handle_softirqs+0x225/0x840 [ 562.116619][ C1] ? do_softirq+0x76/0xd0 [ 562.116636][ C1] ? wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 562.116652][ C1] do_softirq+0x76/0xd0 [ 562.116667][ C1] [ 562.116672][ C1] [ 562.116678][ C1] __local_bh_enable_ip+0xf8/0x130 [ 562.116693][ C1] wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 562.116710][ C1] wg_packet_handshake_send_worker+0x204/0x370 [ 562.116734][ C1] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 562.116764][ C1] ? rcu_is_watching+0x15/0xb0 [ 562.116785][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 562.116806][ C1] process_scheduled_works+0xa8e/0x14e0 [ 562.116832][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 562.116849][ C1] ? assign_work+0x3cf/0x5d0 [ 562.116866][ C1] worker_thread+0xa47/0xfb0 [ 562.116886][ C1] ? __kthread_parkme+0x71/0x1f0 [ 562.116906][ C1] kthread+0x388/0x470 [ 562.116924][ C1] ? __pfx_worker_thread+0x10/0x10 [ 562.116939][ C1] ? __pfx_kthread+0x10/0x10 [ 562.116958][ C1] ret_from_fork+0x514/0xb70 [ 562.116989][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 562.117008][ C1] ? __switch_to+0xc89/0x1420 [ 562.117025][ C1] ? __pfx_kthread+0x10/0x10 [ 562.117043][ C1] ret_from_fork_asm+0x1a/0x30 [ 562.117070][ C1] [ 562.117585][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 5416 jiffies! g50409 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 562.117610][ C0] rcu: Possible timer handling issue on cpu=0 timer-softirq=36537 [ 562.117621][ C0] rcu: rcu_preempt kthread starved for 5417 jiffies! g50409 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 562.117642][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 562.117653][ C0] rcu: RCU grace-period kthread stack dump: [ 562.117661][ C0] task:rcu_preempt state:I stack:27752 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 562.117722][ C0] Call Trace: [ 562.117730][ C0] [ 562.117743][ C0] __schedule+0x17d9/0x56c0 [ 562.117771][ C0] ? __lock_acquire+0x683/0x2cf0 [ 562.117828][ C0] ? __pfx___schedule+0x10/0x10 [ 562.117864][ C0] ? schedule+0x90/0x2b0 [ 562.117892][ C0] schedule+0x164/0x2b0 [ 562.117920][ C0] schedule_timeout+0x152/0x2c0 [ 562.117950][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 562.117974][ C0] ? __pfx_process_timeout+0x10/0x10 [ 562.118001][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 562.118026][ C0] ? prepare_to_swait_event+0x322/0x350 [ 562.118061][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 562.118099][ C0] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 562.118126][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 562.118148][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 562.118178][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 562.118208][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 562.118235][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 562.118261][ C0] ? __kthread_parkme+0x71/0x1f0 [ 562.118285][ C0] ? __kthread_parkme+0x196/0x1f0 [ 562.118314][ C0] kthread+0x388/0x470 [ 562.118339][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 562.118361][ C0] ? __pfx_kthread+0x10/0x10 [ 562.118387][ C0] ret_from_fork+0x514/0xb70 [ 562.118415][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 562.118440][ C0] ? __switch_to+0xc89/0x1420 [ 562.118466][ C0] ? __pfx_kthread+0x10/0x10 [ 562.118492][ C0] ret_from_fork_asm+0x1a/0x30 [ 562.118535][ C0] [ 562.118543][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 562.118555][ C0] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 562.118575][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 562.118588][ C0] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 562.118618][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 562.118643][ C0] Code: bb 7c 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 ce 15 00 fb f4 4c 07 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 562.118658][ C0] RSP: 0018:ffffc900001271c8 EFLAGS: 000002d3 [ 562.118676][ C0] RAX: ffffffff8176b19a RBX: 0000000000000003 RCX: ffff88801dee5d00 [ 562.118690][ C0] RDX: 0000000000000000 RSI: ffffffff8e23667a RDI: ffffffff8c4bbf80 [ 562.118703][ C0] RBP: 0000000000000003 R08: ffffffff90576c37 R09: 1ffffffff20aed86 [ 562.118716][ C0] R10: dffffc0000000000 R11: fffffbfff20aed87 R12: 0000000000000200 [ 562.118729][ C0] R13: 0000000000000000 R14: ffff888052630158 R15: dffffc0000000000 [ 562.118743][ C0] FS: 0000000000000000(0000) GS:ffff888124f4c000(0000) knlGS:0000000000000000 [ 562.118758][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 562.118772][ C0] CR2: 0000200000005038 CR3: 0000000033aa4000 CR4: 00000000003526f0 [ 562.118791][ C0] Call Trace: [ 562.118799][ C0] [ 562.118806][ C0] kvm_wait+0x10f/0x150 [ 562.118830][ C0] __pv_queued_spin_lock_slowpath+0x74a/0xbc0 [ 562.118867][ C0] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 562.118908][ C0] do_raw_spin_lock+0x26c/0x2f0 [ 562.118927][ C0] ? __dev_queue_xmit+0xd56/0x3820 [ 562.118962][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 562.118994][ C0] __dev_queue_xmit+0xd56/0x3820 [ 562.119032][ C0] ? __dev_queue_xmit+0x29b/0x3820 [ 562.119067][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 562.119094][ C0] ? ip6_output+0x337/0x540 [ 562.119118][ C0] ? lock_acquire+0x106/0x350 [ 562.119143][ C0] ? ip6_output+0x337/0x540 [ 562.119194][ C0] ? ip6_output+0x11e/0x540 [ 562.119221][ C0] ip6_output+0x337/0x540 [ 562.119252][ C0] udp_tunnel6_xmit_skb+0x6d9/0xd60 [ 562.119344][ C0] send6+0x5ce/0x920 [ 562.119379][ C0] ? send6+0x255/0x920 [ 562.119397][ C0] ? __pfx_send6+0x10/0x10 [ 562.119414][ C0] ? lock_acquire+0x106/0x350 [ 562.119446][ C0] ? wg_socket_send_buffer_to_peer+0x13b/0x1c0 [ 562.119475][ C0] wg_socket_send_skb_to_peer+0x111/0x1d0 [ 562.119500][ C0] wg_packet_handshake_send_worker+0x204/0x370 [ 562.119540][ C0] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 562.119591][ C0] ? rcu_is_watching+0x15/0xb0 [ 562.119620][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 562.119641][ C0] process_scheduled_works+0xa8e/0x14e0 [ 562.119691][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 562.119718][ C0] ? assign_work+0x3cf/0x5d0 [ 562.119744][ C0] worker_thread+0xa47/0xfb0 [ 562.119793][ C0] kthread+0x388/0x470 [ 562.119818][ C0] ? __pfx_worker_thread+0x10/0x10 [ 562.119838][ C0] ? __pfx_kthread+0x10/0x10 [ 562.119864][ C0] ret_from_fork+0x514/0xb70 [ 562.119892][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 562.119917][ C0] ? __switch_to+0xc89/0x1420 [ 562.119949][ C0] ? __pfx_kthread+0x10/0x10 [ 562.119976][ C0] ret_from_fork_asm+0x1a/0x30 [ 562.120019][ C0] [ 706.367600][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 184s! [kworker/u8:1:13] [ 706.367626][ C0] Modules linked in: [ 706.367638][ C0] irq event stamp: 2236939 [ 706.367645][ C0] hardirqs last enabled at (2236938): [] kvm_wait+0x100/0x150 [ 706.367678][ C0] hardirqs last disabled at (2236939): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 706.367712][ C0] softirqs last enabled at (2157506): [] __alloc_skb+0x189/0x7a0 [ 706.367739][ C0] softirqs last disabled at (2157508): [] wg_socket_send_skb_to_peer+0x54/0x1d0 [ 706.367774][ C0] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 706.367794][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 706.367805][ C0] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 706.367835][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 706.367869][ C0] Code: bb 7c 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 ce 15 00 fb f4 4c 07 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 706.367884][ C0] RSP: 0018:ffffc900001271c8 EFLAGS: 000002d3 [ 706.367900][ C0] RAX: ffffffff8176b19a RBX: 0000000000000003 RCX: ffff88801dee5d00 [ 706.367913][ C0] RDX: 0000000000000000 RSI: ffffffff8e23667a RDI: ffffffff8c4bbf80 [ 706.367926][ C0] RBP: 0000000000000003 R08: ffffffff90576c37 R09: 1ffffffff20aed86 [ 706.367938][ C0] R10: dffffc0000000000 R11: fffffbfff20aed87 R12: 0000000000000200 [ 706.367951][ C0] R13: 0000000000000000 R14: ffff888052630158 R15: dffffc0000000000 [ 706.367964][ C0] FS: 0000000000000000(0000) GS:ffff888124f4c000(0000) knlGS:0000000000000000 [ 706.367979][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 706.367992][ C0] CR2: 0000200000005038 CR3: 0000000033aa4000 CR4: 00000000003526f0 [ 706.368011][ C0] Call Trace: [ 706.368021][ C0] [ 706.368028][ C0] kvm_wait+0x10f/0x150 [ 706.368053][ C0] __pv_queued_spin_lock_slowpath+0x74a/0xbc0 [ 706.368091][ C0] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 706.368133][ C0] do_raw_spin_lock+0x26c/0x2f0 [ 706.368153][ C0] ? __dev_queue_xmit+0xd56/0x3820 [ 706.368181][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 706.368212][ C0] __dev_queue_xmit+0xd56/0x3820 [ 706.368251][ C0] ? __dev_queue_xmit+0x29b/0x3820 [ 706.368285][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 706.368312][ C0] ? ip6_output+0x337/0x540 [ 706.368338][ C0] ? lock_acquire+0x106/0x350 [ 706.368360][ C0] ? ip6_output+0x337/0x540 [ 706.368411][ C0] ? ip6_output+0x11e/0x540 [ 706.368437][ C0] ip6_output+0x337/0x540 [ 706.368467][ C0] udp_tunnel6_xmit_skb+0x6d9/0xd60 [ 706.368507][ C0] send6+0x5ce/0x920 [ 706.368542][ C0] ? send6+0x255/0x920 [ 706.368559][ C0] ? __pfx_send6+0x10/0x10 [ 706.368575][ C0] ? lock_acquire+0x106/0x350 [ 706.368608][ C0] ? wg_socket_send_buffer_to_peer+0x13b/0x1c0 [ 706.368635][ C0] wg_socket_send_skb_to_peer+0x111/0x1d0 [ 706.368659][ C0] wg_packet_handshake_send_worker+0x204/0x370 [ 706.368692][ C0] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 706.368742][ C0] ? rcu_is_watching+0x15/0xb0 [ 706.368771][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 706.368793][ C0] process_scheduled_works+0xa8e/0x14e0 [ 706.368851][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 706.368879][ C0] ? assign_work+0x3cf/0x5d0 [ 706.368905][ C0] worker_thread+0xa47/0xfb0 [ 706.368954][ C0] kthread+0x388/0x470 [ 706.368979][ C0] ? __pfx_worker_thread+0x10/0x10 [ 706.368997][ C0] ? __pfx_kthread+0x10/0x10 [ 706.369023][ C0] ret_from_fork+0x514/0xb70 [ 706.369053][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 706.369078][ C0] ? __switch_to+0xc89/0x1420 [ 706.369103][ C0] ? __pfx_kthread+0x10/0x10 [ 706.369129][ C0] ret_from_fork_asm+0x1a/0x30 [ 706.369172][ C0] [ 706.369180][ C0] Sending NMI from CPU 0 to CPUs 1: [ 706.369261][ C1] NMI backtrace for cpu 1 [ 706.369274][ C1] CPU: 1 UID: 0 PID: 1053 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 706.369291][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 706.369301][ C1] Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker [ 706.369325][ C1] RIP: 0010:debug_lockdep_rcu_enabled+0x0/0x40 [ 706.369353][ C1] Code: 48 8d 3d 13 fd 86 04 48 c7 c6 3c d8 21 8e 67 48 0f b9 3a 90 eb ca cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 31 c0 83 3d 63 c2 83 04 00 74 1d 83 3d 3a f4 83 04 00 [ 706.369365][ C1] RSP: 0018:ffffc90000a07910 EFLAGS: 00000092 [ 706.369378][ C1] RAX: ffffffff89a0aea7 RBX: ffffffff89dca4d8 RCX: ffff888028910000 [ 706.369389][ C1] RDX: 0000000000010100 RSI: 0000000000000001 RDI: 0000000000000002 [ 706.369399][ C1] RBP: 0000000000000001 R08: ffff8880121d419f R09: 1ffff1100243a833 [ 706.369409][ C1] R10: dffffc0000000000 R11: ffffed100243a834 R12: ffff88807ff9bc00 [ 706.369419][ C1] R13: ffff8880121d4000 R14: dffffc0000000000 R15: ffff8880121d4340 [ 706.369430][ C1] FS: 0000000000000000(0000) GS:ffff88812504c000(0000) knlGS:0000000000000000 [ 706.369442][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 706.369453][ C1] CR2: 00007f8811e00218 CR3: 000000000e946000 CR4: 00000000003526f0 [ 706.369468][ C1] Call Trace: [ 706.369474][ C1] [ 706.369479][ C1] advance_sched+0xa8f/0xc80 [ 706.369508][ C1] ? __pfx_advance_sched+0x10/0x10 [ 706.369528][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 706.369551][ C1] hrtimer_interrupt+0x448/0x910 [ 706.369577][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 706.369600][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 706.369620][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 706.369637][ C1] RIP: 0010:console_flush_all+0x7d2/0xaf0 [ 706.369654][ C1] Code: ff ff e8 21 2a 21 00 90 0f 0b 90 e9 9c fc ff ff e8 13 2a 21 00 e8 2e ce 2d 0a 48 85 db 74 c0 e8 04 2a 21 00 fb 48 8b 5c 24 18 <48> 8b 44 24 28 42 80 3c 20 00 4d 8d 77 58 74 08 4c 89 f7 e8 06 c6 [ 706.369667][ C1] RSP: 0018:ffffc90000a07cc0 EFLAGS: 00000246 [ 706.369680][ C1] RAX: ffffffff81a5d75c RBX: ffffc90000a07e20 RCX: ffff888028910000 [ 706.369691][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 706.369701][ C1] RBP: ffffc90000a07dd0 R08: ffffffff90576c37 R09: 1ffffffff20aed86 [ 706.369712][ C1] R10: dffffc0000000000 R11: fffffbfff20aed87 R12: dffffc0000000000 [ 706.369723][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff8f46f4e0 [ 706.369737][ C1] ? console_flush_all+0x7cc/0xaf0 [ 706.369757][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 706.369779][ C1] ? console_flush_all+0x123/0xaf0 [ 706.369797][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 706.369814][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 706.369833][ C1] console_unlock+0xd1/0x1c0 [ 706.369856][ C1] ? __pfx_console_unlock+0x10/0x10 [ 706.369878][ C1] ? _printk+0xdd/0x130 [ 706.369896][ C1] vprintk_emit+0x485/0x560 [ 706.369919][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 706.369939][ C1] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 706.369963][ C1] _printk+0xdd/0x130 [ 706.369981][ C1] ? __pfx__printk+0x10/0x10 [ 706.369994][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 706.370014][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 706.370037][ C1] gred_dequeue+0x498/0x670 [ 706.370057][ C1] __qdisc_run+0x24c/0x1620 [ 706.370074][ C1] ? gred_enqueue+0x1003/0x25a0 [ 706.370099][ C1] __dev_queue_xmit+0x1c05/0x3820 [ 706.370123][ C1] ? __dev_queue_xmit+0x29b/0x3820 [ 706.370146][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 706.370167][ C1] ? lock_acquire+0x106/0x350 [ 706.370184][ C1] ? ip6_output+0x337/0x540 [ 706.370214][ C1] ? ip6_output+0x11e/0x540 [ 706.370234][ C1] ip6_output+0x337/0x540 [ 706.370254][ C1] ? ip6_send_skb+0x10a/0x380 [ 706.370270][ C1] ip6_send_skb+0x1cd/0x380 [ 706.370285][ C1] icmp6_send+0x1459/0x1b50 [ 706.370303][ C1] ? icmp6_send+0x23d/0x1b50 [ 706.370339][ C1] ? __pfx_icmp6_send+0x10/0x10 [ 706.370373][ C1] ? raw6_local_deliver+0xfa/0x8e0 [ 706.370390][ C1] ? xfrm6_policy_check+0x569/0x820 [ 706.370410][ C1] ? udp_lib_checksum_complete+0x157/0x210 [ 706.370432][ C1] udpv6_rcv+0x123b/0x1d50 [ 706.370458][ C1] ? __pfx_udpv6_rcv+0x10/0x10 [ 706.370477][ C1] ip6_protocol_deliver_rcu+0xd6e/0x1680 [ 706.370505][ C1] ip6_input_finish+0x191/0x370 [ 706.370523][ C1] NF_HOOK+0x336/0x3c0 [ 706.370539][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 706.370555][ C1] ? NF_HOOK+0x9e/0x3c0 [ 706.370569][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 706.370585][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 706.370606][ C1] ip6_input+0x16a/0x270 [ 706.370621][ C1] ? ip6_input+0x23/0x270 [ 706.370638][ C1] NF_HOOK+0x336/0x3c0 [ 706.370653][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 706.370668][ C1] ? NF_HOOK+0x9e/0x3c0 [ 706.370683][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 706.370699][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 706.370720][ C1] process_backlog+0x774/0x1860 [ 706.370738][ C1] ? process_backlog+0x3c3/0x1860 [ 706.370759][ C1] __napi_poll+0xaa/0x330 [ 706.370774][ C1] net_rx_action+0x61d/0xf50 [ 706.370795][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 706.370809][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 706.370832][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 706.370857][ C1] handle_softirqs+0x225/0x840 [ 706.370875][ C1] ? do_softirq+0x76/0xd0 [ 706.370892][ C1] ? wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 706.370907][ C1] do_softirq+0x76/0xd0 [ 706.370922][ C1] [ 706.370927][ C1] [ 706.370932][ C1] __local_bh_enable_ip+0xf8/0x130 [ 706.370948][ C1] wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 706.370965][ C1] wg_packet_handshake_send_worker+0x204/0x370 [ 706.370988][ C1] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 706.371019][ C1] ? rcu_is_watching+0x15/0xb0 [ 706.371040][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 706.371055][ C1] process_scheduled_works+0xa8e/0x14e0 [ 706.371082][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 706.371099][ C1] ? assign_work+0x3cf/0x5d0 [ 706.371116][ C1] worker_thread+0xa47/0xfb0 [ 706.371138][ C1] ? __kthread_parkme+0x71/0x1f0 [ 706.371158][ C1] kthread+0x388/0x470 [ 706.371177][ C1] ? __pfx_worker_thread+0x10/0x10 [ 706.371192][ C1] ? __pfx_kthread+0x10/0x10 [ 706.371210][ C1] ret_from_fork+0x514/0xb70 [ 706.371230][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 706.371249][ C1] ? __switch_to+0xc89/0x1420 [ 706.371266][ C1] ? __pfx_kthread+0x10/0x10 [ 706.371285][ C1] ret_from_fork_asm+0x1a/0x30 [ 706.371311][ C1] [ 706.372207][ C0] Kernel panic - not syncing: softlockup: hung tasks [ 706.372223][ C0] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 706.372249][ C0] Tainted: [L]=SOFTLOCKUP [ 706.372256][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 706.372268][ C0] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 706.372297][ C0] Call Trace: [ 706.372306][ C0] [ 706.372314][ C0] vpanic+0x56c/0xa60 [ 706.372343][ C0] ? __pfx_vpanic+0x10/0x10 [ 706.372369][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 706.372400][ C0] panic+0xc5/0xd0 [ 706.372425][ C0] ? __pfx_panic+0x10/0x10 [ 706.372447][ C0] ? printk_trigger_flush+0x13d/0x180 [ 706.372485][ C0] watchdog_timer_fn+0x785/0x790 [ 706.372531][ C0] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 706.372556][ C0] __hrtimer_run_queues+0x371/0xa10 [ 706.372594][ C0] hrtimer_interrupt+0x448/0x910 [ 706.372642][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 706.372673][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 706.372698][ C0] [ 706.372705][ C0] [ 706.372714][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 706.372735][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 706.372761][ C0] Code: bb 7c 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 ce 15 00 fb f4 4c 07 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 706.372776][ C0] RSP: 0018:ffffc900001271c8 EFLAGS: 000002d3 [ 706.372792][ C0] RAX: ffffffff8176b19a RBX: 0000000000000003 RCX: ffff88801dee5d00 [ 706.372805][ C0] RDX: 0000000000000000 RSI: ffffffff8e23667a RDI: ffffffff8c4bbf80 [ 706.372818][ C0] RBP: 0000000000000003 R08: ffffffff90576c37 R09: 1ffffffff20aed86 [ 706.372831][ C0] R10: dffffc0000000000 R11: fffffbfff20aed87 R12: 0000000000000200 [ 706.372852][ C0] R13: 0000000000000000 R14: ffff888052630158 R15: dffffc0000000000 [ 706.372874][ C0] ? kvm_wait+0x10a/0x150 [ 706.372902][ C0] kvm_wait+0x10f/0x150 [ 706.372924][ C0] __pv_queued_spin_lock_slowpath+0x74a/0xbc0 [ 706.372961][ C0] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 706.373004][ C0] do_raw_spin_lock+0x26c/0x2f0 [ 706.373023][ C0] ? __dev_queue_xmit+0xd56/0x3820 [ 706.373050][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 706.373082][ C0] __dev_queue_xmit+0xd56/0x3820 [ 706.373121][ C0] ? __dev_queue_xmit+0x29b/0x3820 [ 706.373156][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 706.373184][ C0] ? ip6_output+0x337/0x540 [ 706.373209][ C0] ? lock_acquire+0x106/0x350 [ 706.373233][ C0] ? ip6_output+0x337/0x540 [ 706.373285][ C0] ? ip6_output+0x11e/0x540 [ 706.373311][ C0] ip6_output+0x337/0x540 [ 706.373343][ C0] udp_tunnel6_xmit_skb+0x6d9/0xd60 [ 706.373380][ C0] send6+0x5ce/0x920 [ 706.373415][ C0] ? send6+0x255/0x920 [ 706.373433][ C0] ? __pfx_send6+0x10/0x10 [ 706.373450][ C0] ? lock_acquire+0x106/0x350 [ 706.373483][ C0] ? wg_socket_send_buffer_to_peer+0x13b/0x1c0 [ 706.373512][ C0] wg_socket_send_skb_to_peer+0x111/0x1d0 [ 706.373537][ C0] wg_packet_handshake_send_worker+0x204/0x370 [ 706.373569][ C0] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 706.373620][ C0] ? rcu_is_watching+0x15/0xb0 [ 706.373649][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 706.373670][ C0] process_scheduled_works+0xa8e/0x14e0 [ 706.373719][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 706.373747][ C0] ? assign_work+0x3cf/0x5d0 [ 706.373774][ C0] worker_thread+0xa47/0xfb0 [ 706.373822][ C0] kthread+0x388/0x470 [ 706.373854][ C0] ? __pfx_worker_thread+0x10/0x10 [ 706.373873][ C0] ? __pfx_kthread+0x10/0x10 [ 706.373900][ C0] ret_from_fork+0x514/0xb70 [ 706.373928][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 706.373953][ C0] ? __switch_to+0xc89/0x1420 [ 706.373978][ C0] ? __pfx_kthread+0x10/0x10 [ 706.374004][ C0] ret_from_fork_asm+0x1a/0x30 [ 706.374046][ C0] [ 707.521360][ C0] Shutting down cpus with NMI [ 707.521660][ C0] Kernel Offset: disabled